Separate names with a comma.
Discussion in 'Site Discussions & Suggestions' started by Quantumcat, May 21, 2017.
Is this possible?
It is not possible to use HTML in posts or signatures, no.
We have a large list of BBcode that should cover a lot of use cases, though.
This isn't AcmlmBoard, you can't have customised 'post layouts' (although it would be a neat suggestion).
Allowing posting HTML is a bad idea, since by extension it allows posting whatever JS scripts you want, which can do dangerous things.
Just filter bad code out like iframe and script. That's what AcmlmBoard does.
It's not that simple. Sure you can strip out script tags, but can all of the onWhatever attributes be stripped out? Can it be guarenteed that all new onWhatever attributes added to browsers can be filtered out? Allowing up HTML posting opens the door to either security vulnerabilities or requires impecable filtering considering the entire HTML standard.
Good point, actually.
And also, there might be those few that decide to screw with elements on the page or with other people's post layouts, as I've seen witnessed on my own forum ._.
Are you in control of bb code or does that come from somewhere else? It would be nice to be able to place elements next to each other and also resize images. If you're getting an image from an outside url you don't have the ability to change the size.
I have no experience with Xenforo personally, but all other forum softwares allow you to add custom bbcode, so I would assume Xenforo does as well.