Best of joomla gives you news, joomla templates, tutorials and websites about Joomla , FireBoard and FireMessage official page.
| No account yet?   |
Welcome, Guest
Please Login or Register.    Lost Password?
{code} Does not work (1 viewing) (1) Guest
Go to bottom Favoured: 1
TOPIC: {code} Does not work
#28095
{code} Does not work 10 Months, 3 Weeks ago  
Hi, the crowd
Code:

 this is just an example

In this last line, you where supposed to see:
Code:

 ‹a href="nowhere"›this is just an example‹/a›


Somebody, paranoid, i suppose, and bad understanding XSS, had suppressed somewhere the &-l-t-; opening and &-g-t-; closing tags, both in write and read.
As the bbcode and smileclass are specially dirty, and because $_REQUEST["message"] is used by joomla too it can be everywhere.
So, i have made a quick and dirty hack for that, if some dev is interested.

{edit} Please, if you do not agree that a html special character is without any danger, instead of replacing yavascript with _yavascript_ witch no one can use in copy/paste, better do
script -› ‹span›s‹/span›cript
... !
All that incredible code can be replaced with 4 lines !

BTW: i have no answer to my proposal to collaborate to the developpement of fireboard.
No dev reading this board ?
File Attachment:
File Name: code-18da55280dc2cb2507f130f59d5d4fe0.txt
File Size: 1549
esperado (User)
Fresh Boarder
Posts: 14
graphgraph
User Offline Click here to see the profile of this user
Gender: Male ch.esperado@libertysurf.fr ch.esperado@libertysurf.fr Location: Paris Birthdate: 1945-12-26
Logged Logged
 
Last Edit: 2007/10/18 12:32 By esperado.
 
Simple is beautiful
 
The administrator has disabled public write access.  
#30539
Re:{code} Does not work 10 Months ago  
This still haven't been fixed by the devs it seems. When even their own staff are having problems with this on these very forums, it should really be fixed. Check out the Fix 01, 02 and 03 threads f.ex. The manual instructions for at least two of those fixes aren't correct due to this problem, code being stripped away.
ezet (User)
Fresh Boarder
Posts: 6
graphgraph
User Offline Click here to see the profile of this user
Logged Logged
 
The administrator has disabled public write access.  
Go to top
Powered by FireBoard - Creditsget the latest posts directly to your desktop