Quote:
|
Originally Posted by Viper
Interesting... I suspect if you used the background style to load an image that was infected... but you could do that using background in the body tag... and I thought that hole had been plugged..
banning "style" is a stupid move though. I think "url" (or something like that) would be what you'd want to ban.
|
I think it was more to do with sneaking an external executable object into the page.