Answer A Question
Why can't I use HTML on unasked.com?
Answers
answered by anonymous -
It's to stop something called cross site scripting attacks where a malicious user can include damamging HTML on a page.
Comments
Then why not just block damaging HTML? I want to make my letters big... at least tell me which script this site does use.
Sounds easy enough, but how many variations of 'damaging HTML' exist today and how many new versions will be invented in the next 24 hours? As a rule in programming (in any language) , you don't filter bad code, you can only specify good code and filter everything else. This is why the standard formatting tags which are allowed are listed, and (almost) everything else is filtered. This is mandatory practice on all websites secured against cross-browser scripting.
1 - 5
of 1
First |
< Previous |
Next > |
Last


Add Comment