If I want to post HTML, I do it like this:
Code:
<html><head><script>function x() { alert("Hello") }</script></head><body onload="x()"><b>Hey</b></body></html>
If I want to do some remote XSS I might do something like this:
<b/<script>alert("Hello")</script>
.. What.. No message box? Damn it Jack! How dare you not allow me to hack MalwareTips by letting us use HTML tags in our posts! http://malwaretips.com/styles/MalwareTips/xenforo/clear.pnghttp://malwaretips.com/styles/MalwareTips/xenforo/clear.png Why can't we have an admin who doesn't give a damn about security and let's us all do what we want.... http://malwaretips.com/styles/MalwareTips/xenforo/clear.png
^ Ps. I was being sarcastic, Jack's a great (and responsible) admin, hence the site hasn't been hacked (to my knowledge).
