Elliott Back's Blog - Latest Comments in Squidoo XSS Exploit Leads to Wordpress Spam Delugehttp://elliottbacksblog.disqus.com/enSun, 18 Jan 2009 07:05:31 -0000Re: Squidoo XSS Exploit Leads to Wordpress Spam Delugehttp://elliottback.com/wp/squidoo-xss-exploit-leads-to-wordpress-spam-deluge/#comment-5259514Squidoo took good care of that with banning the iframe all together, this is real nasty though you can still see this happening with older WP blogs, they often use these tricks to stuff cookies or something.Squidoo BuilderSun, 18 Jan 2009 07:05:31 -0000Re: Squidoo XSS Exploit Leads to Wordpress Spam Delugehttp://elliottback.com/wp/squidoo-xss-exploit-leads-to-wordpress-spam-deluge/#comment-3195993Setting phasers to stun, I'm going in to take a closer look. Ensign Smith will you accompany me?Ken SavageTue, 03 Jul 2007 01:10:30 -0000Re: Squidoo XSS Exploit Leads to Wordpress Spam Delugehttp://elliottback.com/wp/squidoo-xss-exploit-leads-to-wordpress-spam-deluge/#comment-3195992Whoops.. "Libraries like HTML Purifier are simple enough to use"KennyMon, 02 Jul 2007 22:06:01 -0000Re: Squidoo XSS Exploit Leads to Wordpress Spam Delugehttp://elliottback.com/wp/squidoo-xss-exploit-leads-to-wordpress-spam-deluge/#comment-3195991How negligent. Libraries like HTML Purifier simple enough to use -- what plausible reason do they have for allowing that type of markup?KennyMon, 02 Jul 2007 22:05:18 -0000