On 13 Jul 2005, at 14:13, Brion Vibber wrote:
Jeff Harrington wrote:
I added the IMG strings to the parser php, but
the system still won't
allow IMG tags to be used. Does 1.4.5 do this in a different manner?
MediaWiki does not allow the <img> HTML element to be used
directly. If
you're hacking the parser to add it, you're on your own.
In light of Microsoft's latest botch, er, I mean patch, you should be
EXTREMELY RETICENT to allow the IMG tag. This should only be allowed
on trusted intranets.
Due to Microsoft's botched color management, JPEG image files can now
serve as virus vectors. Merely displaying an image with a specially
crafted embedded color profile on one's screen can cause the computer
to be taken over.
All images that the general public can put on a website should be
stripped of embedded color profiles, thanks to Microsoft.
And we thought the worst we had to fear from images was goatse.cx. :-)
:::: Conflict cannot survive without your participation. -- Wayne Dyer
:::: Jan Steinman <http://www.Bytesmiths.com/Van>