Name: CodeFilter_6xx v1.01

Description This modification prevents users from posting executable Javascript code within a UBBCode tag.

Author: el84

Compatibility: Tested on 6.01, 6.02, and 6.03

Link: http://el84.addr.com/ubbmods/CodeFilter_6xx_101.txt

Revision History:
v1.00 - Initial release for UBB 6.01
v1.01 - Changed instructions for UBB6.02 and 6.03

To Do: Wordletize error messages.

This is not a security enhancement. Wish I could say it adds some cool new feature, but it doesn't. All it does is prevent users from embedding Javascript in UBB Code tags. And it does so without filtering any Javascript keywords.

Please carefully read the description of this mod in the instructions.

[ April 08, 2001: Message edited by: el84 ]

tight
looks good!

While it doesn't add a new feature, it's another step toward better security within UBB and for this you deserved to be applauded. ::claps::

I'm sure Navaho, Ted, and/or CC will be checking this thread out once this hack goes gold!

q

I'll be honest. I don't think this mod needs to go gold. That implies the error messages would be wordletized.

Here's what I'd like to see happen with this mod:

• Any flaws (leaks) in the code are found and fixed
• The code that applies to the standard UBB6 would be incorporated into a future UBB6 release.
• The code that applies to UBB Code Buttons gets added to the UBB Code Buttons mod.

If Infopop incorporates the code, they will use their own hack-warning wordlet. So, no need for me to do that now. Then, UBB Code Buttons mod can use the same warning wordlet.

I bet this mod will be obsolete and unnecessary soon. That would make me happy.

if there isn't publicly viewably text, no wordlets are even possible, let alone necessary...

Nice work, and thanks for sharing...