MeFi isn't spoof-proof

March 8, 2001 6:06 AM

Not a bug as such, but plinth's latest shows that MeFi isn't spoof-proof. Is there a way to parse comments to ensure that "layout-critical" HTML (ie the "span class" tag) won't be rendered?
posted by holgate to Bugs at 6:06 AM (7 comments total)

plinth did a very nice job, actually. Even after viewing the source it took me a while to realize what was happening, but once I knew, it became reasonably apparent that someone had faked the post. (especially considering the anchor tag is severely out of order)

I think that, for the most part, it's a harmless prank and we shouldn't worry too much about it. If it becomes an issue and someone uses it for actual evil purposes, then it can be chased down in a couple of ways - especially by looking at the actual data - and the violator can be severely beaten.

I don't think many people will use it for evil though.
posted by cCranium at 9:14 AM on March 8, 2001

oh. heh. weird. Yeah, I guess I could figure out a way to circumvent this sort of hack.
posted by mathowie (staff) at 10:22 AM on March 8, 2001

oh, who am I kidding? I'll never get around to it, because I'm just plain lazy! That reminds me, does anyone else around here like wrestling? WWF Smackdown is the best show on TV. The Rock rules! I think I'll go watch it right now.
posted by mathowie at 3:38 PM PST on March 8

I don't know, Matt. Maybe you should fix that bug before someone abuses it.
posted by waxpancake at 3:54 PM on March 8, 2001

;-j waxpancake
posted by lagado at 7:45 PM on March 8, 2001

heh, funny waxpancake.

ok, duly noted. I can search for "span class=" being in a comment and kick that shit out from ever being posted.

posted by mathowie (staff) at 8:54 PM on March 8, 2001

I love Hillary! No tax cuts for the rich! Viva Castro!
posted by aaron at 9:35 PM on March 8, 2001

hehe.
posted by waxpancake at 9:54 PM on March 8, 2001