note 46109 rejected from function.strip-tags by tomsommer
| From: | tomsommer@php.net | Date: | Wed, 29 Sep 2004 23:16:47 +0000 |
| Subject: | note 46109 rejected from function.strip-tags by tomsommer | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-77594@lists.php.net to get a copy of this message | ||
Note Submitter: SecureGuy
----
I have a problem with tREXX's solution above...what if someone does this:
<a href="javjavascriptascript: alert('!!!')"
onmonmouseoverouseover="alert('Blah!')">
After passing through that function, it would look like this:
<a href="javascript: alert('!!!')"
onmouseover="alert('Blah!')">
Therefore, his function needs some revising...just letting people know.