Kunena 7.0.5 & Kunena 6.4.11 – Security Updates Released

The Kunena team has announce the arrival of Kunena 7.0.5 [K 7.0.5] in stable which is now available for download as a native Joomla extension for J! 5.4.x/6.0.x. This version addresses most of the issues that were discovered in K 6.2 / K 6.3 / K 6.4 and issues discovered during the last development stages of K 7.0.

The Kunena team is also pleased to announce the eleventh version of Kunena 6.4, a native Joomla extension for Joomla! 5.0, 5.1, 5.2, 5.3, 5.4 and 6.0.

If you are having problems then, for your own benefit, it would save us all a lot of time if you would kindly post your configuration report when you ask for help from this forum. If you do not post your configuration report we will not ask you for it but you will probably not get your problem solved, either.

K 2.0 support will cease on 31 August 2013 and this section of the forum will be closed and archived after that time and no further questions will be answered about this version.

Question E-mail address protected from spambots

More
13 years 8 months ago #133254 by donkey12
Hi there,
Our forum moderators received today an email notification for a new topic containing an email address. The email address was hidden in the notification and the following message was included: This e-mail address is being protected from spambots. You need JavaScript enabled to view it.
Does Kunena allows HTML or Javascript to be injected into the site?
If yes, is that safe?
How to enable Javascript to view the email address in the notification?

Please Log in or Create an account to join the conversation.

More
13 years 8 months ago #133258 by sozzled
What do you mean "our forum moderators received an email notification containing an email address"? Where did this email notification come from? What did it look like? How do you know it was generated by Kunena?

"User-written Javascript" (i.e. something written by the person posting messages posted in the forum). that is meant to run on other users' browsers, cannot be used in messages posted on the forum. We've had this discussion many times (see [Merged topic] WYSIWYG editor for Kunena: How to allow HTML tags? A lot of people have asked "can I allow my users to not use BBcode so that they can post Javascript, other HTML tags, etc.?" and this is one of the reasons why Kunena uses BBCode : to prevent malicious code injections.

Please Log in or Create an account to join the conversation.

Time to create page: 0.221 seconds