Re: RSS 2.0 textInput element

One good reason to strip them might have something to do with trusted realms
and sites making phishing attempts.  As in, put something in a feed that
ends up running in a trusted context and have it "do something" unwelcome.

Frankly, this violates my rule of feeds solely being newsfeeds of content.
If you need a form then, by all means, use one... just keep it on the
destination WEB page and link to that from inside the feed.

-Bill Kearney

> There are a number of RSS aggregators that strip FORM elements from html
> content (looks like about 35% of my small sample set). I was under the
> impression that this was for security reasons, but I can't find anything
to
> back that up (other than that IE used to have a parsing bug in INPUT
> elements that would cause it to explode). Anyone know what the security
> implications are? Is it sensible or paranoid to strip FORM elements?



 
Yahoo! Groups Links

<*> To visit your group on the web, go to:
    http://groups.yahoo.com/group/rss-dev/

<*> To unsubscribe from this group, send an email to:
    [email protected]

<*> Your use of Yahoo! Groups is subject to:
    http://docs.yahoo.com/info/terms/