Re: Using kses HTML filter
"Fredrik Jervfors" <[email protected]>
| Newsgroups | gmane.mail.squirrelmail.devel |
|---|---|
| Message-ID | <[email protected]> |
> It's well known that our current HTML filter is based on blacklisting, > and although there haven't been recent bugs found, blacklisting is an > inherently dangerous approach. A whitelisting filter this therefore more > desirable. > > Has anyone taken a look at KSES before? It's a plug-and-play HTML filter > on a whitelist based approach. I'm not sure how good it would work with > SquirrelMail, but it may be interesting to try it out if noone has done > that before. > > http://sourceforge.net/project/shownotes.php?release_id=302996 I don't know anything about the HTML filter, but a white-list approach sounds better than a black-list one. Sincerely, Fredrik ------------------------------------------------------------------------- This SF.net email is sponsored by the 2008 JavaOne(SM) Conference Don't miss this year's exciting event. There's still time to save $100. Use priority code J8TL2D2. http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone ----- squirrelmail-devel mailing list Posting guidelines: http://squirrelmail.org/postingguidelines List address: [email protected] List archives: http://news.gmane.org/gmane.mail.squirrelmail.devel List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-devel