in reply to Re: (nrd) Filtering potentially dangerous URI schemas in <a href="...">
in thread Filtering potentially dangerous URI schemas in <a href="...">
Listening to both sides, I'm hearing
"It's all fun and games until someone gets an eye poked out."I'll side with IlyaM on this. Arbitrary Javascript in URL schemes is Not A Good Thing.
|
---|