[SOLVED] < and > signs in code
Fan#17562
DISCUSSION OF ORIGIN
Fan#17562 Sunday 24th April 2016, 19:35:57
solved < and > signs in code
Hi,I noticed that if you do < test > between ''' ''', you get
```
< test >
```
But between code/code, you get
< test >
Fred#f8768
Fred#f8768 Sunday 24th April 2016, 22:19:21
Flatboard accepts in part the markdown format.Because the signs :
< > can open the door to malicious code in Javascript, so use the bbcode [code] to normally display the unexecuted html code.
ex: <script>alert('Alert XSS')</script>
In the [Doc page](view.php/plugin/page/p/docs), i authorize all html & markdown content, because only admin post page.
**We must not forget that any intervenor access to the editor to post a new topic or reply.**
Fan#17562
Fan#17562 Monday 25th April 2016, 23:07:00
Sure, I understand, thank you.
| Suggested Topics | View / Reply | Forum |
|---|---|---|
| 751327c0 started solved Update to 1.02 | 1.1K / 2 | General Questions |
| 431c9266 started 🐞 fixed Edit text show after post edit | 2.6K / 10 | General Questions |
| AlexanderLiebrecht started 🇩🇪 I see here in the forum already Flatboard v1.0.1 :) | 1.1K / 1 | General Questions |
| started | 96 / 0 |