Solspace Support Forums | form fields are checked for scripting and other bad stuff?

form fields are checked for scripting and other bad stuff?

jo22

Posted: 08 July 2008 09:59 PM

[ Ignore ]

Newbie

Total Posts: 14

Joined 2007-06-21

Hi there,
Love your stuff. I just have a quick question to verify my understanding of Freeform module for EE.

When people submit textarea or textinput type fields, does Freeform use EE’s system or its own system to remove html coding and script injection, etc ?

I mean, the fields do get ‘cleaned”, right?

I know I could spend some time testing it, but I’m guessing you may know the answer real easy. Thanks in advance!

Profile

Pie Man

Posted: 09 July 2008 07:50 AM

[ Ignore ] [ # 1 ]

Administrator

Total Posts: 3374

Joined 2006-10-18

jo22,

Freeform respects native EE settings for this.

All scripts are removed… however, HTML does pass.

Signature

Profile

jo22

Posted: 13 July 2008 10:22 AM

[ Ignore ] [ # 2 ]

Newbie

Total Posts: 14

Joined 2007-06-21

Thanks. That’s what I needed to know.

Profile

‹‹ form_name being set as hidden field? Passing FreeForm Data to a Weblog -- or, FreeForm Entries author_id parameter ››