This is a read-only snapshot of the ComputerCraft forums,
taken in April 2020.
HTML <bbcode> tag
Started by tehComputerCrafter, 19 November 2015 - 06:45 PMPosted 19 November 2015 - 08:26 PM
How does this relate to the forums? Forums use BB tags, not html so the logical thing would be to have a bb tag allowing you to use html.
Posted 20 November 2015 - 01:34 AM
Truth be told the forum software supports raw HTML just fine already. It's disabled for most users for obvious reasons.
Web browsers could be coded to support BBCode, but it'd break a lot of pre-existing HTML source.
Web browsers could be coded to support BBCode, but it'd break a lot of pre-existing HTML source.
Posted 20 November 2015 - 04:06 AM
Moved to Forum Discussion.
Bomb Bloke is right. Lots of unsavory things can be done with some HTML inclusions, so it's disabled for all users except moderators and admins.
EDIT: I think I may have misinterpreted the nature of the request… Did you mean you wanted HTML in the forums, or to have the ability to add BBCodes in general HTML markup?
Bomb Bloke is right. Lots of unsavory things can be done with some HTML inclusions, so it's disabled for all users except moderators and admins.
EDIT: I think I may have misinterpreted the nature of the request… Did you mean you wanted HTML in the forums, or to have the ability to add BBCodes in general HTML markup?
Edited on 20 November 2015 - 03:08 AM
Posted 20 November 2015 - 05:18 AM
How can HTML be harmful?
Posted 20 November 2015 - 07:57 AM
How can HTML be harmful?
<script>for(;;)alert()</script>
Also including flash or Java applets could have some risk. I guess the main risk would be XSS, but I'm not entirely sure.
Posted 20 November 2015 - 12:51 PM
Wouldn't it be possible to disable some HTML features? I doubt anybody would need to use any scripts for a forum post.How can HTML be harmful?<script>for(;;)alert()</script>
Also including flash or Java applets could have some risk. I guess the main risk would be XSS, but I'm not entirely sure.
Posted 20 November 2015 - 02:26 PM
Wouldn't it be possible to disable some HTML features? I doubt anybody would need to use any scripts for a forum post.How can HTML be harmful?<script>for(;;)alert()</script>
Also including flash or Java applets could have some risk. I guess the main risk would be XSS, but I'm not entirely sure.
You have a point. However, I am not sure if disabling some html features is possible.
Posted 21 November 2015 - 05:11 AM
It's a question of "whitelist" versus "blacklist".
A blacklist is impractical; it'd need to be updated immediately if a new or previously unknown bit of dangerous code surfaced from within the HTML standard.
For example, let's say someone figured out a bit of code that evaded the blacklist and allowed them to open an iframe. Bam, they'd then be able to load any code they wanted. Fire up some exploited flash animation or something and maybe get some malware installed on whatever percentage of users aren't up to date.
That sort of risk is untenable. And so a whitelist is implemented instead, via BBCode (or other markup languages, though just about every forum has at least some amount of BBCode available these days). There is very little that BBCode doesn't let you do that 1) HTML does and 2) anyone would want you to do.
A blacklist is impractical; it'd need to be updated immediately if a new or previously unknown bit of dangerous code surfaced from within the HTML standard.
For example, let's say someone figured out a bit of code that evaded the blacklist and allowed them to open an iframe. Bam, they'd then be able to load any code they wanted. Fire up some exploited flash animation or something and maybe get some malware installed on whatever percentage of users aren't up to date.
That sort of risk is untenable. And so a whitelist is implemented instead, via BBCode (or other markup languages, though just about every forum has at least some amount of BBCode available these days). There is very little that BBCode doesn't let you do that 1) HTML does and 2) anyone would want you to do.
Posted 27 November 2015 - 01:23 PM
You can create awesome posts with HTML.There is very little that BBCode doesn't let you do that 1) HTML does and 2) anyone would want you to do.
Posted 03 December 2015 - 10:07 AM
And there was lots of discussion around whether AfterLifeLochie should have been allowed to do that. I am still on the firm opinion of no, it wasn't fair, all it did was 'tease' users by showing them what they can't do. Also, for the record that post is very flakey; if you edit it, you've probably broken it.You can create awesome posts with HTML.There is very little that BBCode doesn't let you do that 1) HTML does and 2) anyone would want you to do.
Posted 05 December 2015 - 05:04 AM
First, there's no HTML forum.How does this relate to the forums? Forums use BB tags, not html so the logical thing would be to have a bb tag allowing you to use html.
Second, this isn't for forums, this is for websites that want to support BBCode without being a forum.
Posted 05 December 2015 - 01:45 PM
First, there's no HTML forum.
Second, this isn't for forums, this is for websites that want to support BBCode without being a forum.
If you want to suggest that HTML should have BBCode support by default, you came to the wrong place. These forums are not the place to suggest new additions to HTML, it's about ComputerCraft here.
Posted 06 December 2015 - 11:05 PM
I couldn't find a place for it to go, so here is my best option.First, there's no HTML forum.
Second, this isn't for forums, this is for websites that want to support BBCode without being a forum.
If you want to suggest that HTML should have BBCode support by default, you came to the wrong place. These forums are not the place to suggest new additions to HTML, it's about ComputerCraft here.