Jump to content

What is this? ---> 'XSSCleaned'

Whether you're a seasoned veteran or a struggling beginner, Web Radiance is the web development and web design forum for you. You'll find answers to all your HTML, CSS, SEO, and Programming needs. Pull up a chair and stay awhile.

Page 1 of 1
  • You cannot start a new topic
  • This topic is locked

What is this? ---> 'XSSCleaned' Rate Topic: -----

#1 User is offline   The Lion 

  • W.R. Private
  • Group: Members
  • Posts: 40
  • Joined: 04-January 08
  • Gender:Male
  • Location:Connecticut
  • Interests:Experimenting with font-end web design, making my lovely wife happy, and working toward owning a home and having kids.

Post icon  Posted 22 January 2008 - 08:19 PM

I've been reverse engineering a 'Godaddy.com' e-mail newsleter to see why their e-mails are so successful in what seems like all e-mail programs. They use this thing 'XSSCleaned' as a kind of limited CSS stand-in. Does anyone know what this is called exactly, so I can look it up and get more info on it. Or does anyone simply have a site in mind that I can check out that defines it and possibly provides a list of the CSS equivalents this 'XSSCleaned' supports? It appears to be the way to get e-mail newsletters done right.

Thanks so much,
The Lion.
0

#2 User is offline   smoseley 

  • W.R. Private
  • Group: Members
  • Posts: 14
  • Joined: 15-January 08

Posted 23 January 2008 - 04:48 PM

http://en.wikipedia....-site_scripting
0

#3 User is offline   prof611 

  • W.R. Private
  • Group: Members
  • Posts: 5
  • Joined: 06-February 08

Posted 06 February 2008 - 08:57 AM

View Postsmoseley, on Jan 23 2008, 05:48 PM, said:



I have gone to the above reference, but all it does is define the meaning of XSS. It doesn't say anything about the attribute 'XSSCleaned'.

I would like to know why it is used (presumably to help prevent exploits, but I can't find this stated anywhere explicitly), and how it gets attached to someone's code.

I originally ran across this attribute when I received an email containing some HTML code. I wrote the webmaster of the site that sent the email, and she said that she originally had used the 'style' attribute. After doing some research, I discovered that her email server had substituted 'XSSCleaned' for 'style'.

All the Googling I've done on this attribute leads only to examples of its use -- not to an explanation. I'm going to continue my research, but I would appreciate any insight that members might have on this subject.

Professor, webmaster@professorscodingcorner.com
0

#4 User is offline   marcamos 

  • W.R. General
  • Group: Administrators
  • Posts: 2,849
  • Joined: 04-April 06
  • Gender:Male
  • Location:Massachusetts - USA

Posted 06 February 2008 - 09:14 AM

Off-topic, welcome to :wr: prof611
0

#5 User is offline   Catalyst 

  • Codesmith
  • Group: Administrators
  • Posts: 1,049
  • Joined: 04-April 06
  • Gender:Male
  • Location:San Diego

Posted 06 February 2008 - 02:11 PM

I actually think it has nothing to do with what you're interested it. It's just a notification like Virus-free.
0

#6 User is offline   prof611 

  • W.R. Private
  • Group: Members
  • Posts: 5
  • Joined: 06-February 08

Posted 07 February 2008 - 04:36 AM

True. It is a notification of sorts. But what I'd like to know is how the browser knows that it's equivalent to 'style'.

In other words, the source code says, for example, XSSCleaned="background-color: #D6E8F8;", and the browser renders the proper background color, just like if it had said style="background-color: #D6E8F8;".
0

#7 User is offline   Catalyst 

  • Codesmith
  • Group: Administrators
  • Posts: 1,049
  • Joined: 04-April 06
  • Gender:Male
  • Location:San Diego

Posted 07 February 2008 - 02:12 PM

Is there a DTD or a custom doctype?

With XHTML you can pretty much define any tags you want so long as you provide a definition somewhere.
0

#8 User is offline   prof611 

  • W.R. Private
  • Group: Members
  • Posts: 5
  • Joined: 06-February 08

Posted 07 February 2008 - 03:46 PM

View PostCatalyst, on Feb 7 2008, 03:12 PM, said:

Is there a DTD or a custom doctype?

With XHTML you can pretty much define any tags you want so long as you provide a definition somewhere.


I'm not sure. The doctype is HTML 4.0 Transitional,
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
but there's a meta tag I haven't seen before:
<META content="MSHTML 6.00.2900.3252" name=GENERATOR> .
0

Share this topic:


Page 1 of 1
  • You cannot start a new topic
  • This topic is locked

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users