global xss filtering and video embeds

[eluser]treadsoftley[/eluser]
Thanks Guys

I was trying not to switch off the global xss filtering as I have been building a system on top of Backendpro which has this setting and I didn't want to have to go through it's coding and various additional mod's I've made to make sure I wasn't opening up a can of worms.

Also the work I have been doing is with an inner city school who have some budding script kiddies in there! Of course, that's the security frame of mind that should always prevail, I guess!

Ivan, we reached the same decision (I dropped the regex idea) and have switched the global xss off and on in this one place for this one field and that seems to be working fine though I may try to refine things in the future.