I'm getting a "terminated request because of suspicious input data" message for some, but not all, of my news aggregation feeds. I found this message in \includes\common.inc in the xss_check_input_data routine. All of the feeds that are failing have a style="..." attribute in a tag. This is evidently hitting the match at line 487 and causing the error message. What I don't know is whether this is new, or whether several feeds just started including style at the same time. Note that this only started happening when I put up the new 4.2.0 release code.

I'm going to test pulling this check out tonight to see if it fixes the feeds. If so, wouldn't it be nicer just to eliminate the "suspicious input data" rather than killing the whole feed?

Thanks,
Kent

Comments

krose’s picture

ax’s picture

dup of [ [bug] terminated request because of suspicious input data | http://drupal.org/node/view/2167 ]. please post follow-ups there. please search bug reports before posting.