HTML in signatures

D

Deleted User

Guest
This isn't AcmlmBoard, you can't have customised 'post layouts' (although it would be a neat suggestion).
 
D

Deleted User

Guest
Allowing posting HTML is a bad idea, since by extension it allows posting whatever JS scripts you want, which can do dangerous things.
Just filter bad code out like iframe and script. That's what AcmlmBoard does.
 

evandixon

PMD Researcher
Developer
Joined
May 29, 2009
Messages
1,725
Trophies
1
Website
projectpokemon.org
XP
2,337
Country
United States
Just filter bad code out like iframe and script. That's what AcmlmBoard does.
It's not that simple. Sure you can strip out script tags, but can all of the onWhatever attributes be stripped out? Can it be guarenteed that all new onWhatever attributes added to browsers can be filtered out? Allowing up HTML posting opens the door to either security vulnerabilities or requires impecable filtering considering the entire HTML standard.
 
  • Like
Reactions: SuzieJoeBob
D

Deleted User

Guest
It's not that simple. Sure you can strip out script tags, but can all of the onWhatever attributes be stripped out? Can it be guarenteed that all new onWhatever attributes added to browsers can be filtered out? Allowing up HTML posting opens the door to either security vulnerabilities or requires impecable filtering considering the entire HTML standard.
Good point, actually.
And also, there might be those few that decide to screw with elements on the page or with other people's post layouts, as I've seen witnessed on my own forum ._.
 

Quantumcat

Dead and alive
OP
Member
Joined
Nov 23, 2014
Messages
15,144
Trophies
0
Location
Canberra, Australia
Website
boot9strap.com
XP
11,119
Country
Australia
It is not possible to use HTML in posts or signatures, no.
We have a large list of BBcode that should cover a lot of use cases, though.
Are you in control of bb code or does that come from somewhere else? It would be nice to be able to place elements next to each other and also resize images. If you're getting an image from an outside url you don't have the ability to change the size.
 

The Real Jdbye

*is birb*
Member
Joined
Mar 17, 2010
Messages
23,338
Trophies
4
Location
Space
XP
13,916
Country
Norway
Are you in control of bb code or does that come from somewhere else? It would be nice to be able to place elements next to each other and also resize images. If you're getting an image from an outside url you don't have the ability to change the size.
I have no experience with Xenforo personally, but all other forum softwares allow you to add custom bbcode, so I would assume Xenforo does as well.
 
  • Like
Reactions: Quantumcat

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • No one is chatting at the moment.
    Xdqwerty @ Xdqwerty: @BakerMan, https://youtu.be/KaMSXIRReOo?si=2hRoijJtiwPUHXk5