> the following executes custom html. > > http://127.0.0.1:8888/%3Cscript%3Edocument.write('test');%3C/script%3E
True - for example : http://127.0.0.1:8888/%3Cscript%3Edocument.write('test1%3cH1%3etest2%3c/H1%3 e');%3C/script%3E The code that displays the "Unexpected key" page should really HTMLise the string in case it contains < > " ' ? etc symbols, otherwise such symbols will make their way directly into the HTML of the page! _______________________________________________ devl mailing list devl at freenetproject.org http://hawk.freenetproject.org/cgi-bin/mailman/listinfo/devl