html in posts

[abushcrafter]

it would be nice if we could insert HTML that works. so for instants you could copy a pic HTML say from google web albums and paste in your post so you don' t need to find the address to post a pic

 

[demographic]

Right click on the picture, go down to properties and leftclick on it, then copy the Address (URL) then you can paste it into the picture popup window thiggamybob.

Its easy.

 

[MagiKelly]

HTML is unlikely to be allowed in posts as it makes it quite easy to hack the forum.

 

[Wayland]

It also allows people to put loads of annoying flashy things in post that slow the whole system down.

 

[Stew]

and probably noises that blare out too....

:BlueTeamE

 

[tomtom]

Its unlikely to happen. It would have some benefits but leaves too much scope for malicious code.

 

[bikething]

I'd settle for posts written in English

 

[abushcrafter]

It also allows people to put loads of annoying flashy things in post that slow the whole system down.

and probably noises that blare out too....

:BlueTeamE

:sad6: :theyareon :theyareon :theyareon :theyareon :theyareon :theyareon :theyareon :theyareon :theyareon :theyareon

I get the point

and I see the hacking bit .............
but I still don't get how you could hack by having html in posts

 

[Ed]

but I still don't get how you could hack by having html in posts

Well I'm not going to go into details .... but .... html has tags like <script> and <applet> that could be used auto execute malicious code by your browser as soon as they are viewed ..... imagine a script that auto redirects you to a porn site when you view a post ..... that is a simple one.... someone with good scripting knowledge could do even more harm..... Alot of denial of service attacks to websites (commonly called DOS attacks) are staged through other websites that allow scripting.... or how about reading you outlook address book and sending email to them all ... with virus' attached? For over 8 years this has been a 'major' problem with sites that have dynamic content (like BCUK) .... hence html code is not allowed here in the forum.

Ed

 

[abushcrafter]

Well I'm not going to go into details ....

that makes sense

:sad6: couldn't resist