Hi Folks

Please note - if you're on edge Hobo, as of a few days ago the html,  
markdown and textile rich types now all do whitelist sanitising so you  
are automatically protected from XSS attacks.

See HoboFields::SantizeHtml

Tom

p.s. the attribute whitelist looks kinda short. Anyone have a list of  
safe attribute names?

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Hobo 
Users" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/hobousers?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to