Safe RSS: Testing RSS readers for safe RSS consumption

Back in 2003 Mark Pilgrim wrote an article regarding safe comsumption of RSS. But some RSS readers render active content, and some even don't let users decide wether active content should be enabled or not. RSS readers should generally strip: You can test your RSS reader with example feeds containing some of the tags mentioned above: RSS 2.0, RSS 0.92, Atom 0.3.

Overview over readers I have tested so far. None of the readers has been configured, so it's the default. Last updated: 09.10.2007.

ReaderJSMetaLinkIframeFrameObjectEmbedStyle attrStyle tagsExpObfuscationNotes
Akregator ------------
Awazu PE ------------
Blam XXXX-XX-----
BlogBridge ------------
Bloglines ------------
BottomFeeder ------------
FeedDemon -----XX-----
FeedGhost --X---------
FeedReader XXXX-XXXXXX-
Firefox ------------
Google Reader ------------
Internet Explorer 7 ------------
Juice ------------
Liferea -----X------
Thunderbird -----------didn't render
NetNewsWire V2 -XXX-X-----shares cookies with Safari
Netvibes ------------
NewsCrawler XXXX-XXXXXX-
NewsFan XXXX-XX-----
NewsFire --X--XX-----
NewzSpider XXXXX--XXXX-
Opera --XX-XX-----
RSSOwl XXXXXXX-----
Safari ------------
Sage (FF ext) ------------
Sauce Reader ------------
SharpReader ------------
Straw ------------
ThinFeeder ------------
Vienna XXXX-XX-----