<div dir="ltr">Right, there is a switch for html in ocal, trying to find why it's was off <div class="gmail_quote">On Sat, Feb 19, 2011 at 6:02 PM, <a href="mailto:jon@rejon.org">jon@rejon.org</a> <<a href="mailto:jon@rejon.org">jon@rejon.org</a>> wrote: <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">Yeah, I don't see a security problem there, but still html should not be allowed into a form input. Bassel? <div><div></div><div class="h5"> On Sat, Feb 19, 2011 at 10:01 AM, J. Alves <<a href="mailto:alvesjmp@gmail.com">alvesjmp@gmail.com</a>> wrote: > I tried it, Jon. In the profile editing page, if you change your "Full > name" field to that piece of HTML, OCAL's site appears in a small box > there, instead of the text you entered (at least the first time; when > I reloaded the page once, it then just showed the HTML as text). I > just sent another email commenting on this and suggesting a possible > solution. > > Best > J > > On Sat, Feb 19, 2011 at 10:58 AM, <a href="mailto:jon@rejon.org">jon@rejon.org</a> <<a href="mailto:jon@rejon.org">jon@rejon.org</a>> wrote: >> I don't even know what you are talking about? Are you a spammer or can >> you describe what you are talking about? >> >> On Sat, Feb 19, 2011 at 3:15 AM, Piers Haken <<a href="mailto:piersh@hotmail.com">piersh@hotmail.com</a>> wrote: >>> Try setting your Full Name to: >>> >>> <iframe src="/" /> >>> >>> Hilarity ensues. >>> >>> Piers. >>> >>> -----Original Message----- >>> From: clipart-bounces+piersh=<a href="http://hotmail.com" target="_blank">hotmail.com</a>@<a href="http://lists.freedesktop.org" target="_blank">lists.freedesktop.org</a> >>> [mailto:<a href="mailto:clipart-bounces%2Bpiersh">clipart-bounces+piersh</a>=<a href="http://hotmail.com" target="_blank">hotmail.com</a>@<a href="http://lists.freedesktop.org" target="_blank">lists.freedesktop.org</a>] On Behalf Of >>> Piers Haken >>> Sent: Friday, February 18, 2011 3:39 PM >>> To: 'Open Clip Art Library PUBLIC' >>> Subject: Re: [Clipart] Fwd: [Bug 689839] Re: internet explorer save button not >>> working >>> >>> var htmldata = $("#557389homepage textarea").val(); var originaldata = >>> $("#557389homepage textarea").text(); if (htmldata != originaldata) { >>> // in IE these are NEVER different >>> // this code NEVER gets run >>> } >>> >>> >>> Piers. >>> >>> -----Original Message----- >>> From: clipart-bounces+piersh=<a href="http://hotmail.com" target="_blank">hotmail.com</a>@<a href="http://lists.freedesktop.org" target="_blank">lists.freedesktop.org</a> >>> [mailto:<a href="mailto:clipart-bounces%2Bpiersh">clipart-bounces+piersh</a>=<a href="http://hotmail.com" target="_blank">hotmail.com</a>@<a href="http://lists.freedesktop.org" target="_blank">lists.freedesktop.org</a>] On Behalf Of >>> <a href="mailto:jon@rejon.org">jon@rejon.org</a> >>> Sent: Friday, February 18, 2011 12:17 PM >>> To: Open Clip Art Library PUBLIC >>> Subject: [Clipart] Fwd: [Bug 689839] Re: internet explorer save button not >>> working >>> >>> we need someone with internet explorer and who wants to help with aiki to help >>> fix internet explorer and browser bugs. >>> >>> Anyone want to step up to the plate? >>> >>> fabricatorz use linux. >>> >>> Jon >>> >>> >>> ---------- Forwarded message ---------- >>> From: chovynz <<a href="mailto:689839@bugs.launchpad.net">689839@bugs.launchpad.net</a>> >>> Date: Fri, Feb 18, 2011 at 2:05 PM >>> Subject: [Bug 689839] Re: internet explorer save button not working >>> To: <a href="mailto:jon@rejon.org">jon@rejon.org</a> >>> >>> >>> I don't know how to, or what to look for. My time is better spent elsewhere. >>> Changing to openclipart.devel assignee >>> >>> ** Changed in: openclipart >>> Assignee: chovynz (chovynz) => openclipart.devel (openclipart.devel) >>> >>> -- >>> You received this bug notification because you are a member of >>> openclipart.devel, which is a bug assignee. >>> <a href="https://bugs.launchpad.net/bugs/689839" target="_blank">https://bugs.launchpad.net/bugs/689839</a> >>> >>> Title: >>> internet explorer save button not working >>> >>> >>> >>> -- >>> Jon Phillips >>> <a href="http://rejon.org/" target="_blank">http://rejon.org/</a> | <a href="http://fabricatorz.com/" target="_blank">http://fabricatorz.com/</a> >>> chat/skype: kidproto | irc: rejon >>> +1.415.830.3884 (global) | +1-510-499-0894 (sf) >>> _______________________________________________ >>> clipart mailing list >>> <a href="mailto:clipart@lists.freedesktop.org">clipart@lists.freedesktop.org</a> >>> <a href="http://lists.freedesktop.org/mailman/listinfo/clipart" target="_blank">http://lists.freedesktop.org/mailman/listinfo/clipart</a> >>> >>> _______________________________________________ >>> clipart mailing list >>> <a href="mailto:clipart@lists.freedesktop.org">clipart@lists.freedesktop.org</a> >>> <a href="http://lists.freedesktop.org/mailman/listinfo/clipart" target="_blank">http://lists.freedesktop.org/mailman/listinfo/clipart</a> >>> >>> >> >> >> >> -- >> Jon Phillips >> <a href="http://rejon.org/" target="_blank">http://rejon.org/</a> | <a href="http://fabricatorz.com/" target="_blank">http://fabricatorz.com/</a> >> chat/skype: kidproto | irc: rejon >> +1.415.830.3884 (global) | +1-510-499-0894 (sf) >> _______________________________________________ >> clipart mailing list >> <a href="mailto:clipart@lists.freedesktop.org">clipart@lists.freedesktop.org</a> >> <a href="http://lists.freedesktop.org/mailman/listinfo/clipart" target="_blank">http://lists.freedesktop.org/mailman/listinfo/clipart</a> >> > > > > -- > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ > João Marcelo Pereira Alves (J) - Genomics, Molecular Phylogeny and Evolution > Dept. Microbiology & Immunology - MCV/VCU - Richmond, VA, USA > f. 1-804-828-3897 / 804-852-1234 - <a href="http://bioinfo.lpb.mic.vcu.edu" target="_blank">http://bioinfo.lpb.mic.vcu.edu</a> > </div></div>-- <div><div></div><div class="h5">Jon Phillips <a href="http://rejon.org/" target="_blank">http://rejon.org/</a> | <a href="http://fabricatorz.com/" target="_blank">http://fabricatorz.com/</a> chat/skype: kidproto | irc: rejon +1.415.830.3884 (global) | +1-510-499-0894 (sf) </div></div></blockquote></div> -- Bassel Safadi <a href="http://bassel.ws" target="_blank">http://bassel.ws</a> <a href="http://aikilab.org" target="_blank">http://aikilab.org</a> Global +1 323-545-3855 Singapore +65 93488349 </div>