Software Notice: My Profile "Style" Disabled

[John Robinson]

I've disabled the custom "STYLE" feature of our profile pages until I can properly implement a CSS safe-filter. I've learned that Microsoft, in its infinite wisdom, had extended style sheets to incorporate scripted elements. Scripting can be abused and may lead to identity theft or worse.

[John Robinson]

No ETA on the return of this feature.

[Support Free Republic]

SHOW YOUR PRIDE! SUPPORT FREE REPUBLIC!
	Donate Here By Secure Server Or mail checks to FreeRepublic , LLC PO BOX 9771 FRESNO, CA 93794 or you can use PayPal at Jimrob@psnw.com
STOP BY AND BUMP THE FUNDRAISER THREAD- It is in the breaking news sidebar!

[Cicero]

Thanks for watching security.

[Constitution Day]

Darn. I believe I was using smith288's style sheet.

Thanks for the heads-up, anyway.

[PatrickHenry]

Question: About a year ago you provided a list of features you were thinking of including in the software. Among them was an "ignore this poster" feature. I know many freepers who would dearly love to have such a capability. Is there any news on this?

[DouglasKC]

Thanks for keeping us sec-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

Da Zooohhhhwwaazzzzzzzzz crew rulz!!!!!!!!!!!!!!! from Zi3hny, m00kie2 and fzzzr-----------------------------------------------------------------------------

re John. I'm sure the board will be much safer from hackers and whatnot.

[Constitution Day]

I'd be willing to contribute more to FR for that feature.
Some posters are so predicably asinine that it's my #1 "most wanted" option.

[John Robinson]

That should be in the next major release of the software. It's coming together slowly.

[PatrickHenry]

I'd be willing to contribute more to FR for that feature [ignore this poster]. Some posters are so predicably asinine that it's my #1 "most wanted" option.

John's the one you need to tell this to.

[Jeff Chandler]

that Microsoft, in its infinite wisdom, had extended style sheets to incorporate scripted elements.

I haven't heard anything about that. Your source?

[PatrickHenry]

That should be in the next major release of the software. It's coming together slowly.

Bless you. BLESS YOU!!

[Constitution Day]

Sorry, I should have pinged him. Thanks for taking care of it.

CD

[Constitution Day]

That should be in the next major release of the software. It's coming together slowly.

yes, Yes, YES!!

[Jeff Chandler]

Nevermind, I found it.

[PatrickHenry]

Check this out! John Robinson's next revision of the software will include the long-sought "ignore this poster" feature! Free at last, free at last!! Time to make those contributions, folks!

[John Robinson]

<DIV STYLE="width: expression(window.alert('0wn3d'));">0wned</DIV>

[dandelion]

Thank you for your vigilance!! You are the reason I feel safe in posting here...

[John Robinson]

BugTraq: Webmails + Internet Explorer can create unwanted javascript execution

I felt pretty dirty when I went forward with the unscrubbed CSS, but I couldn't find an exploitable condition in the standards so it seemed reasonably safe.

[smith288]

Stupid MS and their infinate wisdom. If its not standard...DONT screw with it. Why do they have problems with that?

[IncPen]

Who needs style - we've got substance!