On 13 Jul 2005, at 14:13, Brion Vibber wrote:
Jeff Harrington wrote:
I added the IMG strings to the parser php, but the system still won't allow IMG tags to be used. Does 1.4.5 do this in a different manner?
MediaWiki does not allow the <img> HTML element to be used directly. If you're hacking the parser to add it, you're on your own.
In light of Microsoft's latest botch, er, I mean patch, you should be EXTREMELY RETICENT to allow the IMG tag. This should only be allowed on trusted intranets.
Due to Microsoft's botched color management, JPEG image files can now serve as virus vectors. Merely displaying an image with a specially crafted embedded color profile on one's screen can cause the computer to be taken over.
All images that the general public can put on a website should be stripped of embedded color profiles, thanks to Microsoft.
And we thought the worst we had to fear from images was goatse.cx. :-)
:::: Conflict cannot survive without your participation. -- Wayne Dyer :::: Jan Steinman http://www.Bytesmiths.com/Van