|
|
|
Power User
 
Group: Forum Members
Last Login: Yesterday @ 6:14:41 AM
Posts: 104,
Visits: 1,546
|
|
Proof-of-concept to demonstrate a very basic phishing attempt. Might not work in all browsers, but well in FF. Can be deleted. Allowing to post HTML is a security risk.
EDIT: Script code removed. Though someone has quoted it. 
|
|
|
|
|
Power User
Group: Forum Members
Last Login: Yesterday @ 6:14:41 AM
Posts: 104,
Visits: 1,546
|
|
Another example (you need to login to view this):
EDIT: Script code removed, since logs show that Reallusion/mods have read the post.
|
|
|
|
|
Power User
Group: Forum Members
Last Login: 11/1/2008 1:24:44 PM
Posts: 121,
Visits: 380
|
|
RKD (9/12/2007)
Proof-of-concept to demonstrate a very basic phishing attempt. Might not work in all browsers, but well in FF. Can be deleted. Allowing to post HTML is a security risk.
? Misleading!!!
Alowing to post some ADVANCED HTML is only a security risk if the dangerous tags and scripts are permitted.
Raw basic HTML for elements like tables is about as dangeous as a full stop and can do nothing more than draw a box!
Will this element be incorporated here???
 -www.iCloneTutorials.com- -1st Ever Stills Gallery- -Sexy Siouxie- -Digital Comics- -The iClone Journal-
|
|
|
|
|
Power User
Group: Forum Members
Last Login: Yesterday @ 6:14:41 AM
Posts: 104,
Visits: 1,546
|
|
Misleading? Lol, the above examples are quick and dirty. They only scratch the surface of how the site can be manipulated, user action monitored or cookies captured. There was annoying spam on the fold forum. Allowing HTML and other multimedia foofaraw might bring that to a new level in no time. Just my two cents.
|
|
|
|
|
Tutor
Group: Senior Forum members
Last Login: Today @ 1:36:13 AM
Posts: 355,
Visits: 1,842
|
|
| well all i know is that it got me - thanks for highlighting it RKD
|
|
|
|
|
Power User
Group: Forum Members
Last Login: Yesterday @ 6:14:41 AM
Posts: 104,
Visits: 1,546
|
|
aknzrdude (9/13/2007)
well all i know is that it got me - thanks for highlighting it RKDThank you. 
Security is all the more important now that the forum accounts have been merged with the premium member accounts.
|
|
|
|