Yeah this is not great, probably should remove this
for example now its my sig and that causes loads of problems

Every thread @Yoshin posts in is now a movie trailer

i think all we need to do is disable the quotation mark in that tag, but maybe other tags are just as exploitable

what the fuck did you all do.

what the fuck did you all do.

Spritey and Mario used their fucking nerd powers to break the site, ban them.

i think all we need to do is disable the quotation mark in that tag, but maybe other tags are just as exploitable

could just allow a-z 0-9 and - based on a quick look at the list of icons

I wish there was a safe way to work HTML/CSS/JavaScript abuse into the site

I wish there was a safe way to work HTML/CSS/JavaScript abuse into the site

that's literally what bbcode is for

unless you mean arbitrary html/css/javascript injection in which case why would you want that

i think all we need to do is disable the quotation mark in that tag, but maybe other tags are just as exploitable

could just allow a-z 0-9 and - based on a quick look at the list of icons

I think space is fine, how much harm could be caused by allowing arbitrary classes added to it? I guess there could be some wild classes i don't know about

This post was last modified: May 31, 2017 at 10:14 PM by rtsmarty.

i think all we need to do is disable the quotation mark in that tag, but maybe other tags are just as exploitable

could just allow a-z 0-9 and - based on a quick look at the list of icons

I think space is fine, how much harm could be caused by allowing arbitrary classes added to it? I guess there could be some wild classes i don't know about

do any of these work



yes lmao

i mean it's not harm it's just general looking like shit

We should definitely figure out a way to allow the actual fontawesome classes because those are useful

I wish there was a safe way to work HTML/CSS/JavaScript abuse into the site

that's literally what bbcode is for

unless you mean arbitrary html/css/javascript injection in which case why would you want that

Stuff like on the previous page, like the button that turns every post fab

Just goofy one-off effects like that. It's pretty impossible to allow that without posing a security risk though

Although the "click this to open a browser alert" might make a fun bbcode

[fa={class}]icon[/fa]
would this not work?

so what happened to [fire] again

so what happened to [fire] again

Performance issues.

did it make some devices

catch fire

did it make some devices

catch fire

never getting another Samsung Note again...