[PHP] and [CODE] tags parsing

Hi,

one of my staff members posted on vbulletin.com's support forums asking about why vB puts a space in certain code when displayed inside the code/php-vB-tags.

For example:

<a href="javascript:window.open(...);">Link</a>

Since they said it was put there by design (hehe, "It's not a bug, it's a feature!"), I was wondering if someone on here could explain how someone could possibly exploit that.

Never heard of anything like that.

Is there a hack to get the code parsed the more "correct" way?

Till

P.S.
If anyone is interested in the thread:
http://www.vbulletin.com/forum/showt...threadid=48055

[Admin]

This is by design, not a bug.

To remove this protection, open /admin/functions.php and delete this code:

          "/javascript:/si",

(appears twice)
And also remove this code:

          "java script:",

(appears twice as well)

[Till]

Originally posted by FireFly
This is by design, not a bug.

To remove this protection, open /admin/functions.php and delete this code:

          "/javascript:/si",

(appears twice)
And also remove this code:

          "java script:",

(appears twice as well)

Thanks for your help.