added emoji + input sanitization

web/emoji.js

@@ -5,6 +5,30 @@ function parseEmoticons( inputStr ){
       text: ':)',
       image: '1.png'
     },
+    {
+      text: '<iframe',
+      image: 'iframe-open.png'
+    },
+    {
+      text: '</iframe>',
+      image: 'iframe-close.png'
+    },
+    {
+      text: '<script',
+      image: 'script-open.gif'
+    },
+    {
+      text: '</script>',
+      image: 'script-close.gif'
+    },
+    {
+      text: '<style',
+      image: 'style-open.png'
+    },
+    {
+      text: '</style>',
+      image: 'style-close.png'
+    },
     {
       text:';)',
       image: '2.png'

web/main.js

@@ -201,7 +201,7 @@ var localStorageArray = [];
     var color = getNodeColor( orderStorage[i].node );
     contentString += '<li><div class="message-block" style="background-color:'+color+'">'+
       '<div class="date-sender">On ' + datereadable +
-      ' <b>' + orderStorage[i].user +'</b> wrote:</div>' +
+      ' <b>' + parseEmoticons(orderStorage[i].user) +'</b> wrote:</div>' +
       '<div class="message-text">' + parseEmoticons( orderStorage[i].message ) + '</div>' + //parseEmoticons is found in emoji.js
       ' <div class="nodehops"><div class="node '+orderStorage[i].node+'">from '+orderStorage[i].alias + '</div>' +
       ' <div class="hops '+orderStorage[i].hops+'">via '+orderStorage[i].hops+' nodes</div></div></div></li>';

web/photostuff.js

@@ -51,7 +51,7 @@ function submitImage(){
     if( !namm || namm == "" ){
       namm = "anonymous";
     }
-    addOutboxItem( namm, image.outerHTML );
+    addOutboxItem( parseEmoticons(namm), image.outerHTML );
 
     showOverview();
     return false;