Last modified: 2013-06-30 04:33:14 UTC
I have administrative access to the Wikimedia-DC mailing list. I tried changing the general list information page for Wikimedia-DC through <https://lists.wikimedia.org/mailman/edithtml/wikimedia-dc/listinfo.html>, but my attempts failed due to concerns about "suspicious HTML". It does not explain what is suspicious but I think it is concerned about the incorporation of external stylesheets and images. I am trying to make the page look more like Wikimedia DC's MediaWiki installation <http://wikimediadc.org>, so that the transition from the website to the mailing list page is seamless. Therefore, I do not think I can do anything to prevent the use of external stylesheets or especially external images. The HTML I wish to be used is available here: <http://pastebin.com/S8BJZTeU>. Let me know if there is a way to implement this without triggering the suspicious HTML filter, or if this code actually would trigger an XSS attack. Thank you, James
From a quick Google search, http://wiki.dreamhost.com/Lists - it does indeed look like the external style sheets and line 6-8 with <link rel=> is causing the problem. The solution is to "embed the styles in the page" - can you try doing that?
I removed all <link> tags within the header and I incorporated all the styles into the head of the document. This wasn't enough to satisfy Mailman, so I converted all the images used on the page into data URIs. I could take my laptop to the middle of a farm in Montana and it would load the same as if I were connected on the Internet, because *every single thing in the page* is in the source code and not loaded from anywhere else. Here is the code: http://pastebin.com/BYEGc1Z2 Regardless, Mailman still sees the code as suspicious. It does not tell me what is suspicious about my code, and the FAQ page it links to does not shine any light on this.
I found the culprit: Mailman takes offense at this line of code: <meta charset="UTF-8" /> That's right. You're not allowed to define the character set. To quote the pre-eminent Twitter user @tree_bro, may he rest in peace: *attaches forehead to industrial oscillator, flips it on, SMH at 100,000 kHz*
(In reply to comment #3) > I found the culprit: Mailman takes offense at this line of code: > > <meta charset="UTF-8" /> That seems awfully silly.
