Hi,

A blacklist is very hard to do. You can also bypass this filter by using <a href="javascript:evil_function()"> or <a onclick="evilfunction"> and many, many more. It would be impossible to catch them all, because every system that has tried to do so has had bugs in the past. So, IOW, you're ...

Absolutely. Allowing HTML introduces all sort of JavaScript injection, which can lead to cookie disclosure, password disclosure and web defacement. Thank you for responding. I am not too fluent on this issue, so if you could bear with me just a little more, I have a couple of extension questions on ...

WYSIWYG usage in articles is nice to have, though I --as the article writer-- can easily make do without it.

Since it is the authors that get to use it, there's easily much more capable alternatives --OpenOffice, Nvu etc-- which means you can simply copy paste from them to s9y.

And, face it, for ...

[quote="judebert"]And of course, upgrading is a snap![/quote]

How does one go about upgrading? Simply unzip over current installation?

[quote="judebert"]The 1.1 releases are nightly snapshots, at the bottom of the page.[/quote]

Is there a change log for these nightlies? Or, do I download first ...