I've been reverse engineering a 'Godaddy.com' e-mail newsleter to see why their e-mails are so successful in what seems like all e-mail programs. They use this thing 'XSSCleaned' as a kind of limited CSS stand-in. Does anyone know what this is called exactly, so I can look it up and get more info on it. Or does anyone simply have a site in mind that I can check out that defines it and possibly provides a list of the CSS equivalents this 'XSSCleaned' supports? It appears to be the way to get e-mail newsletters done right.
Thanks so much,
The Lion.
What is this? ---> 'XSSCleaned'
Whether you're a seasoned veteran or a struggling beginner, Web Radiance is the web development and web design forum for you. You'll find answers to all your HTML, CSS, SEO, and Programming needs. Pull up a chair and stay awhile.
Page 1 of 1
What is this? ---> 'XSSCleaned'
#1
Posted 22 January 2008 - 08:19 PM
#2
Posted 23 January 2008 - 04:48 PM
#3
Posted 06 February 2008 - 08:57 AM
smoseley, on Jan 23 2008, 05:48 PM, said:
I have gone to the above reference, but all it does is define the meaning of XSS. It doesn't say anything about the attribute 'XSSCleaned'.
I would like to know why it is used (presumably to help prevent exploits, but I can't find this stated anywhere explicitly), and how it gets attached to someone's code.
I originally ran across this attribute when I received an email containing some HTML code. I wrote the webmaster of the site that sent the email, and she said that she originally had used the 'style' attribute. After doing some research, I discovered that her email server had substituted 'XSSCleaned' for 'style'.
All the Googling I've done on this attribute leads only to examples of its use -- not to an explanation. I'm going to continue my research, but I would appreciate any insight that members might have on this subject.
Professor, webmaster@professorscodingcorner.com
The Professor: Professional Website Design | Code Snippets and Tutorials
#5
Posted 06 February 2008 - 02:11 PM
I actually think it has nothing to do with what you're interested it. It's just a notification like Virus-free.
#6
Posted 07 February 2008 - 04:36 AM
True. It is a notification of sorts. But what I'd like to know is how the browser knows that it's equivalent to 'style'.
In other words, the source code says, for example, XSSCleaned="background-color: #D6E8F8;", and the browser renders the proper background color, just like if it had said style="background-color: #D6E8F8;".
In other words, the source code says, for example, XSSCleaned="background-color: #D6E8F8;", and the browser renders the proper background color, just like if it had said style="background-color: #D6E8F8;".
The Professor: Professional Website Design | Code Snippets and Tutorials
#7
Posted 07 February 2008 - 02:12 PM
Is there a DTD or a custom doctype?
With XHTML you can pretty much define any tags you want so long as you provide a definition somewhere.
With XHTML you can pretty much define any tags you want so long as you provide a definition somewhere.
#8
Posted 07 February 2008 - 03:46 PM
Catalyst, on Feb 7 2008, 03:12 PM, said:
Is there a DTD or a custom doctype?
With XHTML you can pretty much define any tags you want so long as you provide a definition somewhere.
With XHTML you can pretty much define any tags you want so long as you provide a definition somewhere.
I'm not sure. The doctype is HTML 4.0 Transitional,
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
but there's a meta tag I haven't seen before:
<META content="MSHTML 6.00.2900.3252" name=GENERATOR> .
The Professor: Professional Website Design | Code Snippets and Tutorials
Share this topic:
Page 1 of 1


Help
This topic is locked
MultiQuote











