diff options
author | joey <joey@0fa5a96a-9a0e-0410-b3b2-a0fd24251071> | 2007-05-08 20:55:43 +0000 |
---|---|---|
committer | joey <joey@0fa5a96a-9a0e-0410-b3b2-a0fd24251071> | 2007-05-08 20:55:43 +0000 |
commit | 0041e9380838a5a8491674585e5dc6067763ebf6 (patch) | |
tree | 3b064a3dfd8e02a9f5de0f49012d15097b70b45e /doc | |
parent | 27bfa7b40eeae989a4dadaeba1c6f5336946d1ef (diff) |
web commit by JoshTriplett: Add another example, and add a description to each test.
Diffstat (limited to 'doc')
-rw-r--r-- | doc/plugins/htmlscrubber.mdwn | 7 |
1 files changed, 4 insertions, 3 deletions
diff --git a/doc/plugins/htmlscrubber.mdwn b/doc/plugins/htmlscrubber.mdwn index 0aa0ab3c0..7962b3b52 100644 --- a/doc/plugins/htmlscrubber.mdwn +++ b/doc/plugins/htmlscrubber.mdwn @@ -32,6 +32,7 @@ HTML tags. Some examples of embedded javascript that won't be let through when this plugin is active: -* <span style="background: url(javascript:window.location='http://example.org/')">test</span> -* <span style="any: expression(window.location='http://example.org/')">test</span> -* <span style="any: expression(window.location='http://example.org/')">test</span> +* script tag test <script>window.location='http://example.org';</script> +* <span style="background: url(javascript:window.location='http://example.org/')">CSS script test</span> +* <span style="any: expression(window.location='http://example.org/')">entity-encoded CSS script test</span> +* <span style="any: expression(window.location='http://example.org/')">entity-encoded CSS script test</span> |