[Owasp-antisamy] unable to produce <param> tag
jason at singsnap.com
Mon May 25 16:52:20 EDT 2009
I've got antisamy 1.3 running under CF8. I'm unable to allow the <param> tag
regardless of it's inclusion in a policy file or not. I can add any other
tag, including object and applet.
I searched the source to determine if it is hard coded but didn't find it
(but that was tough since the word param is all over the source).
Additionally, is there a directive or some other method of specifically
allowing a tag that has no content? The <param> tag used on sites like
youtube in their embed code is in this format and I wish to allow it.
Find me on SingSnap:
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Owasp-antisamy