EnableStripStyleTagsCodeInjection stripping safe styles too

  •  11-02-2010, 10:30 AM

    EnableStripStyleTagsCodeInjection stripping safe styles too

    The following text, when put into CuteEditor, strips the style tags (and leaves the style info). I assume this is because EnableStripStyleTagsCodeInjection is set to true. But there is nothing executable or malicious in the styles:
     
    blah, blah, blah...
    <DIV dir=ltr align=left><SPAN class=187181814-13052010><FONT color=#0000ff
    face="Century Gothic">Yes again, Lisa said the credit was mailed just a couple
    days ago.
    <STYLE>A.psl {
     COLOR: #4e81c4; TEXT-DECORATION: none
    }
    A:hover {
     TEXT-DECORATION: underline
    }
    A.psl:hover {
     COLOR: #999999
    }
    .noro {
     FONT-FAMILY: Verdana,Arial,fixed; COLOR: #4e81c4; FONT-SIZE: 12pt
    }
    .tiny {
     FONT-SIZE: 1pt
    }
    .logotext {
     FONT-FAMILY: Verdana,Arial,fixed; COLOR: #ffffff; FONT-SIZE: 10pt; TEXT-DECORATION: none
    }
    A.brand {
     FONT-FAMILY: Verdana,Arial,fixed; COLOR: #ffffff; FONT-SIZE: 8pt; TEXT-DECORATION: underline
    }
    </STYLE>
    </FONT></SPAN></DIV><BR>
    blah, blah, blah
View Complete Thread