News:

Want to get involved in developing SMF? Why not lend a hand on our GitHub!

Main Menu

HTML! HTML! HTML! HTML!

Started by Spamiam, June 17, 2005, 11:14:00 PM

Previous topic - Next topic

Spamiam

I fully understand that javascript and applets can be a dangerous thing. I'm not talking about those.  Leave those out for sure.

I also understand that a lot of people are just plain paranoid about html permissions - I'm not one of those, and I will take full responsibility for my board and my members.

Over at our board people are *screaming* for html functions. Many of us are web designers and old timers who don't give a whit about bb codes. That's the only downside I have found to moving to this package.

So give us HTML! And for those who don't want it, a way to turn it off! And for those who can't decide, a way to use both HTML and bb codes!

dtm.exe

Admin > Edit Features and Options

-Dan The Man

Spamiam

#2
Yeah I know. We have that turned on, and it's so restricted it's barely noticable that there's *any* HTML functions.

I even put some extra tags in the script, but those don't work like they should. Any qualifiers are not understood.

Try an alternating marquee. Try a list. Try a gradient. Try a formatted table with colored borders and alternately colored cells. To name a few examples. These are not "dangerous" things, at least not at my board. If you consider them dangerous then you should have a way to disallow them. I want them, and don't expect to jump through hoops to get them. These are an expected part of a board package.

I don't mean a handful of basic text formatting tags. I mean *HTML* (minus java and applets of course).

One of the *best* things about this package is the ability to change the look and feel with themes. I love that. Themes are easy breezy with SMF.

(don't want to give the idea that I hate smf or anything - it's great. But it *does* need full featured html functions, and a way to turn them off for those who don't want 'em. )

dtm.exe

Quote from: Spamiam on June 18, 2005, 12:17:57 AM
Yeah I know. We have that turned on, and it's so restricted it's barely noticable that there's *any* HTML functions.

I even put some extra tags in the script, but those don't work like they should. Any qualifiers are not understood.

Try an alternating marquee. Try a list. Try a gradient. Try a formatted table with colored borders and alternately colored cells. To name a few examples. These are not "dangerous" things, at least not at my board. If you consider them dangerous then you should have a way to disallow them. I want them, and don't expect to jump through hoops to get them. These are an expected part of a board package.

I don't mean a handful of basic text formatting tags. I mean *HTML* (minus java and applets of course).

One of the *best* things about this package is the ability to change the look and feel with themes. I love that. Themes are easy breezy with SMF.

(don't want to give the idea that I hate the package or anything - it's great. But it *does* need a good package of html functions, and a way to turn them off for those who don't want 'em. )

Well what kind of HTML tags did you have in mind?

-Dan The Man

Spamiam

The ones I listed already would be a great starting place. How would I incorporate those?

127.0.0.1

If someone botches their html and forgets to say close a tag. Isn't there the possibility of it ruining the entire layout of the page? I *think* that's one reason why only basic html is enabled.

Grudge

The problem is there is no vaguely safe way to allow full html. We need to parse every possible way of writing HTML to keep it clean of javascript - which would slow SMF to a crawl. In SMF 1.1 there is an html tag which admins can use for posting HTML. If you had no concern for security you could probably change one line of code in 1.1 to allow anyone to use it.
I'm only a half geek really...

Advertisement: