Allow Dynamic URL for [img] tags?

[94SupraTT]

2. Admin CP -> vBulletin Options -> Posting Code allowances (vB code / HTML / etc) -> Allow Dynamic URL for [img] tags? -> Yes

Is there any risk if this option is turned on?

[Steve Machol]

Yes:

If this is set to 'no', the [img] tag will not be displayed if the path to the image contains dynamic characters such as ? and &. This can prevent malicious use of the tag.

[94SupraTT]

Yes:

If this is set to 'no', the [img] tag will not be displayed if the path to the image contains dynamic characters such as ? and &. This can prevent malicious use of the tag.

Malicious use such as?

[Steve Machol]

Sorry, I don't know the specific malicious uses.

[Floris]

XSS probably.