[PHP] and [CODE] tags parsing

[Till]

Hi,

one of my staff members posted on vbulletin.com's support forums asking about why vB puts a space in certain code when displayed inside the code/php-vB-tags.

For example:

<a href="javascript:window.open(...);">Link</a>


Since they said it was put there by design (hehe, "It's not a bug, it's a feature!"), I was wondering if someone on here could explain how someone could possibly exploit that.

Never heard of anything like that.

Is there a hack to get the code parsed the more "correct" way?

Till

P.S.
If anyone is interested in the thread:
http://www.vbulletin.com/forum/showthread.php?s=&threadid=48055

[Admin]

This is by design, not a bug.

To remove this protection, open /admin/functions.php and delete this code:
"/javascript:/si",
(appears twice)
And also remove this code:
"java script:",
(appears twice as well)

[Till]

Originally posted by FireFly
This is by design, not a bug.

To remove this protection, open /admin/functions.php and delete this code:
"/javascript:/si",
(appears twice)
And also remove this code:
"java script:",
(appears twice as well)

Thanks for your help. :)