Development

Posted by actinic 28 Apr 2004 03:12 GMT-0000 posts: 14 ☆ ☆ ☆

> Damian:
> Yes all nasty script, object, embed, and others get removed now. Maybe in 1.8.3 we can have some per form checkbox that requires activation before submitting, certainly it wouldnt be a global option!

The problem with this is that the default tiki templates make use of Javascript in good and useful ways (expanding items on the application menu for example). Maybe the stripping of tags needs to be more intelligent, only allowing tags with known "good" attribute values.