Content Checks: Detected HTML-specic exploits in h8AGGVSe016972

[Kevin Spicer]

On Thu, 2003-09-11 at 15:12, Raymond Dijkxhoorn wrote:

>> >Then use the HTML->TEXT ones =)
>>
>> Raymond, could you explain what you mean by that please.

>If you dont want those tags use the HTML -> TEXT conversion options.

Thats what I thought you meant.  What I was actually trying to say was
that the current html stripping option has some drawbacks and that I
would have less hassle about it from users if it only stripped the
offending tags.

I agree that html in emails is not desirable, but whether you or I hate
it is immaterial, we're stuck with it. [ oh yes...  =(   ]
The issue is how walk the fine line of dealing with potential problems
without being a complete BOFH and getting our users backs up (which is
generally not great for job security).




BMRB International
http://www.bmrb.co.uk
+44 (0)20 8566 5000
_________________________________________________________________
This message (and any attachment) is intended only for the
recipient and may contain confidential and/or privileged
material.  If you have received this in error, please contact the
sender and delete this message immediately.  Disclosure, copying
or other action taken in respect of this email or in
reliance on it is prohibited.  BMRB International Limited
accepts no liability in relation to any personal emails, or
content of any email which does not directly relate to our
business.