Brion Vibber wrote:
3) Allow HTML files to be uploaded, but attempt to
strip out javascript.
This could be annoying.
At first thought, this seems faily easy. Just replace all instances
of the word 'javascript' with 'java-script' in uploads?
There are probably reasons why this would suck, but it would be easy,
no?