A member of the Infogrames forum has figured out how to use javascript in his sig to steal passwords in 2 ways. HTML in sigs has now been disabled, but I thought the vbulletin crew would like to know. I won't post the methods here, but if John and other vB'ers would like to email me: [email protected] I'd be happy to pass the info on.
Can we add something to vB that doesn't allow javascript in sigs?
Can we add something to vB that doesn't allow javascript in sigs?