Work at SourceForge, help us to make it a better place! We have an immediate need for a Support Technician in our San Francisco or Denver office.

Close

#7 Stylesheets in feeds can override page stylesheets

open
nobody
None
5
2003-12-30
2003-12-30
Anonymous
No

While playing with embedding CSS in RSS feeds, Jason
discovered a problem [1] such that embedded CSS <link>
tags inside RSS feeds reformat the entire page. A rather
unexpected problem :)

[1] http://joi.ito.com/archives/2003/12/30/
css_in_rss_feed.html#n013256

Discussion

  • Logged In: YES
    user_id=794003

    Thanks for submitting this. In fact, there's lots of ways a
    malicious or just plain broken feed can screw up FoF.
    Unclosed tags, CSS, even embedded scripts are all possible!
    Watch out!

    Some sort of HTML cleaner is in order. Filter all but a
    very restricted set of tags.

     
  • Katie Bechtold
    Katie Bechtold
    2005-12-02

    Logged In: YES
    user_id=891937

    I think this is a duplicate -- in this case, a specific
    instance -- of bug [ 753571 ] Consume RSS Safely.