On Tue, 2003-09-16 at 14:39, Geoffrey Thomas wrote:
JavaScript needs to be disabled in parameters.
http://www.wikipedia.org/wiki/JavaScript_table_security_hole
That page doesn't exist...?
JavaScript is stripped from HTML, or it's supposed to be. Of course, there's an Internet Explorer-related CSS hole that needs to be plugged, and right now you can put anything you want in an uploaded HTML file... *ahem*
-- brion vibber (brion @ pobox.com)