[Owasp-antisamy] unable to produce <param> tag

Jason Copp jason at singsnap.com
Mon May 25 16:52:20 EDT 2009


Hi folks,

I've got antisamy 1.3 running under CF8. I'm unable to allow the <param> tag
regardless of it's inclusion in a policy file or not. I can add any other
tag, including object and applet.

I searched the source to determine if it is hard coded but didn't find it
(but that was tough since the word param is all over the source).

Additionally, is there a directive or some other method of specifically
allowing a tag that has no content? The <param> tag used on sites like
youtube in their embed code is in this format and I wish to allow it.


Thanks,
Jason

-- 

Find me on SingSnap:
http://www.singsnap.com/jason
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.owasp.org/pipermail/owasp-antisamy/attachments/20090525/ae956f59/attachment.html 


More information about the Owasp-antisamy mailing list