Chris Shiflett has a post today, Allowing HTML and Preventing XSS. The problem is how to allow users to format their contributed content without introducing security vulnerabilities. The answer is usually some sort of markup language or filtering and sanitization of HTML.
BBCODE was designed for this purpose. There is no actual standard, [...]
The Problem with Markup Languages
March 14th, 2007Looking forward to 2007
January 4th, 2007Well, I’m finally back in town after the holidays. Let me tell you, I’m glad to be home. Between multiple holidays and taking my grandma to her cancer treatments in Ann Arbor, I was gone far too much of last month.
My Grandma is doing well. They used an experimental new procedure called [...]
Extreme Simplicity
March 1st, 2006Could this be the manifesto of “Extreme Simplicity?”
10 fundamental rules for the age of user experience technology:
More features isn’t better, it’s worse.
You can’t make things easier by adding to them.
Confusion is the ultimate deal-breaker.
Style matters
Only features that provide a good user experience will be used.
Any feature that requires learning will only be adopted by a [...]
Delicious Outage Link Dump
December 19th, 2005Del.icio.us has been down for a while. I use it for my public bookmarks, which are listed on the side of this blog. Here is a post with some recent random things that I would bookmark if I could.
The departure of the hyper-enthusiasts – “The Java hyper-enthusiasts have left the building” (along [...]
The Usability of Input Filtering
March 31st, 2005There seems to be much interest lately in input filtering in PHP, especially in cross site scripting prevention. I’ve always preferred input validation to input filtering, but I am giving filtering a new examination. My problem with filtering is with usability. The comments to this post are a good example. There [...]
Installing Web Applications
November 24th, 2004Mac OS X has made an art of the process of installing an application on the desktop. For a properly packaged application, the process is:
Download.
Locate the application icon in your download directory and optionally move it to another location.
Double click on the application icon to run.
This is the essence of what apple calls Drag [...]
Watchng my Grandmother use Software
October 27th, 2004I just got back from helping my grandmother with her computer. We got her an iMac and she uses Apple’s Mail program pretty effectively. Watching her use Mail is a real education in software usability. I’ve written before about some problems she had with mail. Apple has pretty much fixed every [...]
Friendster wrapup: does MySQL scale
July 14th, 2004Here is a wrap up of some links and information from the friendster PHP conversion of a couple weeks ago.
First, it appears performance really was a major problem for friendster. Friendster Quickly Gathering Foes:
The key issues behind the Friendster abandonment trend, according to users, are the service’s inability to do anything about its habitual [...]
Feed
Subscribe to this blog…