FUDforum
Fast Uncompromising Discussions. FUDforum will get your users talking.

Home » FUDforum » FUDforum Suggestions » Profile image
Show: Today's Messages :: Polls :: Message Navigator
Return to the default flat view Create a new topic Submit Reply
Re: Profile image [message #24118 is a reply to message #19761] Sat, 16 April 2005 01:11 Go to previous message
Anonymous   United States
betacire wrote on Tue, 31 August 2004 10:52

Hi,

In the Admin Control Panel, I see :

********************************************
Profile Image:
Whether or not to allow users to enter a URL to an image in their profile that will be displayed on the user info page for that user. The danger of this feature is that the user could potentially link to a page other then an image and some browsers like Internet Explorer will parse that page executing any potentially hostile Javascript that may be present.
*********************************************

Perhaps, it could be interesting to test if the url ends by .jpg, or .gif, or .png and the potentially risk would be avoid.
And also, wouldn't it be possible to have the same options as for the avatars (URL / Uploaded / ALL / OFF) ?

Thanks

[Message index]
 
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Previous Topic: Disable editing after reply
Next Topic: User input for a FUDforum favicon
Goto Forum:
  

-=] Back to Top [=-
[ Syndicate this forum (XML) ] [ RSS ]

Current Time: Wed Nov 27 17:12:03 GMT 2024

Total time taken to generate the page: 0.03978 seconds