It's great that such attention is taken to security. However, I run a small forum that caters to C++ programmers who develop plugins for our company's application. As a result, there are a lot of code fragments posted that trip these security filters.
For example, searching on "MSG_UPDATE", a standard command in our proprietary scripting language, will trip an SQL Injection warning. The CODE tag does not stop the forum from formatting something like:
The above was an array with an index of "i", but you can see it went ahead and treated it like the BBcode for italicizing.
Just a heads up.
Topic Options
Post Options
Thanks(0)
