XSS Attack

[jihua]

Hi guys , Our site is using FCKEditor , there are some risk with the source code, we added some filters in the server site:<(/?)(script|i?frame|html|link|meta|head)([^>]*?)>");(<[>]*)(on[a-zA-Z]+
s*=([^{>]*)|href
s*=([}>]*script:[^{>]*)>)");
but still can't filter all ,such as the embed video , can anyone help me out , just let "Youbtobe" video allowed to pass.}

[Garry Yao]

Sorry but have to say that we don't provide protection to XSS with our editor, since things related to this is always of a lot of choices and decisions, FYI, tools like [htmlpurifier ​http://htmlpurifier.org/] could be adapted to achieve this.