News | Forum | People | FAQ | Links | Search | Register | Log in
Site Help
This is the forum to ask questions about this website, report things that are broken, request features, etc.

Be sure to check out the FAQ as well.
First | Previous | Next | Last
Hmm 
Or leave it for a bit and then reload the page. Spam reloading it will generate more connections and therefore probably cause the problem to occur longer (I was getting it as well, hence the GA post being the half post I wrote before copying to a text file and making dinner). 
Create_thread.php 
needs <blink> 
Metl 
Paaalease fix #1144/#1163 
New Tags 
Three new tags; see the FAQ for details.

hyperlink
strikethrough
underline 
Also, Spirit: 
yeah, i'll look at that stuff. 
Re: New Tags 
Nice! That will make things easier. 
Yes 
Spirit 
You are stupid... 
 
Hey, can we also have a popup tag? And one for flash overlays? </ddos> 
Hmm... 
you think that's dangerous...

<a href="javascript:alert('doh')">alert</a>

Maybe i should examine the security implications of this... 
 
tbh, i prefered it without the a href linking.

i didn't have to hover over links here to see if they are good to click or not. 
<a href="javascript:var%20v=document.forms[0];v.title.value='I%20AM%20A%20FAGGOT!';v.body.value='HUMP%20MY%20RUMP!';submitpost(v);">Click for a good time!</a> 
I AM A FAGGOT! 
HUMP MY RUMP! 
I AM A FAGGOT! 
HUMP MY RUMP! 
 
:P 
Ankh! 
Didn't know you were too.. 
I AM A FAGGOT! 
HUMP MY RUMP! 
I AM A FAGGOT! 
HUMP MY RUMP! 
Well... 
I think all issues can be addressed.

First, the misleading URL demonstrated by spirit can be mitigated by making raw URLs look different that anchor tags, using color or other formatting.

Second, the http-based XSS attack spirit showed can be fixed by making the logout button require POST instead of GET.

Third, the javascript-based XSS attacks as demonstrated by czg can be prevented by being stricter about the URL (i.e. requiring http:/ftp: at the beginning) 
I AM A FAGGOT! 
HUMP MY RUMP! 
Rofl 
its not true!!! 
Also... 
i might consider allowing anchor tags only in discussion/news threads, and not in posts. This means our news can look nicer, and anything malicious is easily moderated (since threads are few compared to posts.) 
Lol, Great Link 
Ricky: "sweet deadly white stick" up your rump 
I AM A FAGGOT! 
HUMP MY RUMP! 
 
oh god I am a gullible idiot. 
First | Previous | Next | Last
You must be logged in to post in this thread.
Website copyright © 2002-2024 John Fitzgibbons. All posts are copyright their respective authors.