note 24495 deleted from function.strip-tags by nlopess
| From: | nlopess@php.net | Date: | Thu, 11 Mar 2004 14:53:52 +0000 |
| Subject: | note 24495 deleted from function.strip-tags by nlopess | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-66645@lists.php.net to get a copy of this message | ||
Note Submitter: eregi@enevo.com
----
Keep in mind that there's a bug in IE 6 that let's people insert JS into <IMG> SRC
tag.
<img src="javascript:alert('Hello world')" />
Something like that.
Don't allow <img>!!!