HTML in signatures

Discussion in 'Site Discussions & Suggestions' started by Quantumcat, May 21, 2017.

  1. Quantumcat
    OP

    Quantumcat Dead and alive

    Member
    11,591
    6,231
    Nov 23, 2014
    Australia
    Canberra, Australia
    Is this possible?
     
    Lilith Valentine likes this.
  2. tj_cool

    tj_cool Site dev

    Supervisor
    9,993
    -1
    Jan 7, 2009
    Belgium
    This planet
    It is not possible to use HTML in posts or signatures, no.
    We have a large list of BBcode that should cover a lot of use cases, though.
     
    Lilith Valentine likes this.
  3. RoseyDreamy

    RoseyDreamy TheKawaiiNeko

    Member
    116
    129
    Mar 25, 2017
    England
    This isn't AcmlmBoard, you can't have customised 'post layouts' (although it would be a neat suggestion).
     
  4. evandixon

    evandixon PMD Researcher

    Member
    1,686
    808
    May 29, 2009
    United States
    Allowing posting HTML is a bad idea, since by extension it allows posting whatever JS scripts you want, which can do dangerous things.
     
  5. RoseyDreamy

    RoseyDreamy TheKawaiiNeko

    Member
    116
    129
    Mar 25, 2017
    England
    Just filter bad code out like iframe and script. That's what AcmlmBoard does.
     
  6. evandixon

    evandixon PMD Researcher

    Member
    1,686
    808
    May 29, 2009
    United States
    It's not that simple. Sure you can strip out script tags, but can all of the onWhatever attributes be stripped out? Can it be guarenteed that all new onWhatever attributes added to browsers can be filtered out? Allowing up HTML posting opens the door to either security vulnerabilities or requires impecable filtering considering the entire HTML standard.
     
    SuzieJoeBob likes this.
  7. RoseyDreamy

    RoseyDreamy TheKawaiiNeko

    Member
    116
    129
    Mar 25, 2017
    England
    Good point, actually.
    And also, there might be those few that decide to screw with elements on the page or with other people's post layouts, as I've seen witnessed on my own forum ._.
     
  8. Quantumcat
    OP

    Quantumcat Dead and alive

    Member
    11,591
    6,231
    Nov 23, 2014
    Australia
    Canberra, Australia
    Are you in control of bb code or does that come from somewhere else? It would be nice to be able to place elements next to each other and also resize images. If you're getting an image from an outside url you don't have the ability to change the size.
     
  9. The Real Jdbye

    The Real Jdbye Always Remember 30/07/08

    Member
    GBAtemp Patron
    The Real Jdbye is a Patron of GBAtemp and is helping us stay independent!

    Our Patreon
    12,328
    5,339
    Mar 17, 2010
    Norway
    Alola
    I have no experience with Xenforo personally, but all other forum softwares allow you to add custom bbcode, so I would assume Xenforo does as well.
     
    Quantumcat likes this.