OpenPHPnuke International Support

Topic	Views	Replies	by	Date
Cheap Lebron 11 Galaxy superio...tte	6230	1		2018-02-23 06:47
Jordan 4 do not receive the re...Lebron 11 Kings Pride the idea of foreign aid selection in fact, this argument is not groundless, the super frontcourt really are looking for a strong Brazilian striker, this trend also indicates Loew...	5152	0	tracywlsonn44	2015-01-16 03:54
Dwyane Wade Shoes to create th...Hyperdunks 2013 if they can qualify to the same group and Shandong Luneng. Urawa Red Diamonds will go into Group G, if national security through qualifying, will work with its same group, J1 League Ka...	4879	0	lesliecfuen33	2015-01-16 03:29
Lebron Zoom Soldier VI with th...Kobe Grinch playoff opponent is just up the mountain on the J1 Yamagata Yamagata Yamagami J2 League ranked only the first six, but in the upgrade playoff not even g Iwata joy and JEF promoted to J1 Le...	4575	0	rashidathom22	2015-01-16 02:56
Hot Hyperdunk 2013 Preview won...Kobe 8 Grinch Zhao Xuri Perrin national team playing in the game is not a lot of opportunity for another group of them, Binbin, Yang ultrasound is new, they are Olympic team teenager. Before Perrin al...	4743	0	carltonking11	2015-01-16 02:13

Click on the Smilies, to insert it in your Message:

Very Happy	Confused	Cool	Crying (very sad)
Another pint of beer	Surprised	Evil or Very Mad	Sad
ToolTimes at work	I have an idea	Laughing	Mad
Razz	Embaressed	Rolling Eyes	Smile
Wink

more...

Author
hombergs Joined: April 14, 2003	[BUG] bug with "onerror" event Posted: 2005-06-27 19:32 With Revision 3584n the filtering of the JavaScript events are made by a preg_replace call. OPN filters now 19 known Events at the moment. H.O.M.B.E.R.G.S.: Hydraulic Obedient Machine Built for Efficient Repair and Galactic Sabotage There are no problems, only defiances.

hombergs Joined: April 14, 2003	[BUG] bug with "onerror" event Posted: 2005-06-27 18:25 With Revison 3583 the HTML Settings has a new setting. Only Tag, All Attributes and All Attributes (Including JavaScript Events). When only All Attributes is selected OPN will filter out the onerror and onload event. When you have more events to filter, please tell us this events. We will implement this events in the filter. H.O.M.B.E.R.G.S.: Hydraulic Obedient Machine Built for Efficient Repair and Galactic Sabotage There are no problems, only defiances. [ This message was edited by: hombergs on 2005-06-27 18:29 (Original date 2005-06-27 18:25) ]

hombergs Joined: April 14, 2003	[BUG] bug with "onerror" event Posted: 2005-06-27 17:53 This happens when you activate all attributes for the tag in Settings HTML. Cause then OPN will allow all attributes for this tag. Maybe we should deactivate the JavaScript attributes. H.O.M.B.E.R.G.S.: Hydraulic Obedient Machine Built for Efficient Repair and Galactic Sabotage There are no problems, only defiances.

Nurlan Joined: November 17, 2004 Posts: 32 From: Kyrgyzstan	[BUG] bug with "onerror" event Posted: 2005-06-27 14:02 Bug in OPN - users can hack OPN, It can be used in forum, guestbook, shoutbox and other modules, in which they can use HTML tags. See test of this Bug here. www.tamga.info

With Revision 3584n the filtering of the JavaScript events are made by a preg_replace call.
OPN filters now 19 known Events at the moment.

With Revison 3583 the HTML Settings has a new setting. Only Tag, All Attributes and All Attributes (Including JavaScript Events). When only All Attributes is selected OPN will filter out the onerror and onload event.
When you have more events to filter, please tell us this events. We will implement this events in the filter.

This happens when you activate all attributes for the tag in Settings HTML.
Cause then OPN will allow all attributes for this tag.
Maybe we should deactivate the JavaScript attributes.

Bug in OPN - users can hack OPN, It can be used in forum, guestbook, shoutbox and other modules, in which they can use HTML tags.
See test of this Bug here.

Page took 0.12460 seconds to load

Moderated by: stefan, hombergs, xweber
Forum:	Bugs
Post Reply in Topic:	[BUG] bug with "onerror" event
Go to:	OpenPHPnuke International Support Forum Index

Last Postings

Forum