All of the text on http://www.somethingawful.com/articles.php?a=440&p=2 is bold in Mozilla. The culprit is the invalid HTML "<p<strong>". IE, Opera, and Netscape 4 all ignore the tag, but Mozilla treats it as a <P> tag followed by a <STRONG> tag.
Created attachment 128231 [details] A better, clearly explained testcase Correct parsing is determined by the W3C specification, not by what other browsers do. This is a valid, albeit narrowly supported, HTML shortcut. Recommend INVALID.
Agreed, this is a legitimate use by the SGML rules governing HTML. Teh SMGL mastar JeffK could have told you that. ;-)
Status: NEW → RESOLVED
Last Resolved: 15 years ago
Resolution: --- → INVALID
*** Bug 226495 has been marked as a duplicate of this bug. ***
From the dup: if a server strips out <> but not < by itself, this can lead to XSS problems (testcase: http://smgl.positivism.org/music/indexvuln.html). The corresponding view-source bug is bug 70918.
You need to log in before you can comment on or make changes to this bug.