Skip to main content
removed scripting tag http://meta.security.stackexchange.com/questions/2192/lets-get-rid-of-scripting-manually
Source Link
kalina
  • 3.4k
  • 5
  • 23
  • 36

In my Wordpress blog (though this may be true of other blogs too), there is a preview web page feature.

So when I get a comment with a link, I can hover over the link, and it shows me a preview of the page. I sometimes use this to check possible spam messages.

But is there any risk in this? IeFor example, if the webpage has a script or XSS based attack, can my blog be compromised?

Either a general answer, or a Wordpress based answer, will be acceptable.

Edit: To make it clear, I'm not talking about any plugin. In wordpressWordpress comments section, people can optionally post a link to their website. If you hover your mouse over the link, it generates a preview of the website. That's what I was talking about. This seems to be an inbuilt feature of Wordpress.

In my Wordpress blog (though this may be true of other blogs too), there is a preview web page feature.

So when I get a comment with a link, I can hover over the link, and it shows me a preview of the page. I sometimes use this to check possible spam messages.

But is there any risk in this? Ie, if the webpage has a script or XSS based attack, can my blog be compromised?

Either a general answer, or a Wordpress based answer, will be acceptable.

Edit: To make it clear, I'm not talking about any plugin. In wordpress comments section, people can optionally post a link to their website. If you hover your mouse over the link, it generates a preview of the website. That's what I was talking about. This seems to be an inbuilt feature of Wordpress.

In my Wordpress blog (though this may be true of other blogs too), there is a preview web page feature.

So when I get a comment with a link, I can hover over the link, and it shows me a preview of the page. I sometimes use this to check possible spam messages.

But is there any risk in this? For example, if the webpage has a script or XSS based attack, can my blog be compromised?

To make it clear, I'm not talking about any plugin. In Wordpress comments section, people can optionally post a link to their website. If you hover your mouse over the link, it generates a preview of the website. That's what I was talking about. This seems to be an inbuilt feature of Wordpress.

added 305 characters in body
Source Link
Shantnu
  • 747
  • 1
  • 5
  • 8

In my Wordpress blog (though this may be true of other blogs too), there is a preview web page feature.

So when I get a comment with a link, I can hover over the link, and it shows me a preview of the page. I sometimes use this to check possible spam messages.

But is there any risk in this? Ie, if the webpage has a script or XSS based attack, can my blog be compromised?

Either a general answer, or a Wordpress based answer, will be acceptable.

Edit: To make it clear, I'm not talking about any plugin. In wordpress comments section, people can optionally post a link to their website. If you hover your mouse over the link, it generates a preview of the website. That's what I was talking about. This seems to be an inbuilt feature of Wordpress.

In my Wordpress blog (though this may be true of other blogs too), there is a preview web page feature.

So when I get a comment with a link, I can hover over the link, and it shows me a preview of the page. I sometimes use this to check possible spam messages.

But is there any risk in this? Ie, if the webpage has a script or XSS based attack, can my blog be compromised?

Either a general answer, or a Wordpress based answer, will be acceptable.

In my Wordpress blog (though this may be true of other blogs too), there is a preview web page feature.

So when I get a comment with a link, I can hover over the link, and it shows me a preview of the page. I sometimes use this to check possible spam messages.

But is there any risk in this? Ie, if the webpage has a script or XSS based attack, can my blog be compromised?

Either a general answer, or a Wordpress based answer, will be acceptable.

Edit: To make it clear, I'm not talking about any plugin. In wordpress comments section, people can optionally post a link to their website. If you hover your mouse over the link, it generates a preview of the website. That's what I was talking about. This seems to be an inbuilt feature of Wordpress.

Tweeted twitter.com/#!/StackSecurity/status/365803929914712064
Source Link
Shantnu
  • 747
  • 1
  • 5
  • 8

Is there any danger in the preview button in blogs?

In my Wordpress blog (though this may be true of other blogs too), there is a preview web page feature.

So when I get a comment with a link, I can hover over the link, and it shows me a preview of the page. I sometimes use this to check possible spam messages.

But is there any risk in this? Ie, if the webpage has a script or XSS based attack, can my blog be compromised?

Either a general answer, or a Wordpress based answer, will be acceptable.