[SOLVED] < and > signs in code
Fan#17562
DISCUSSION OF ORIGIN
Fan#17562 Sunday 24th April 2016, 19:35:57
solved < and > signs in code
Hi,I noticed that if you do < test > between ''' ''', you get
```
< test >
```
But between code/code, you get
< test >
Fred#f8768
Fred#f8768 Sunday 24th April 2016, 22:19:21
Flatboard accepts in part the markdown format.Because the signs :
< > can open the door to malicious code in Javascript, so use the bbcode [code] to normally display the unexecuted html code.
ex: <script>alert('Alert XSS')</script>
In the [Doc page](view.php/plugin/page/p/docs), i authorize all html & markdown content, because only admin post page.
**We must not forget that any intervenor access to the editor to post a new topic or reply.**
Fan#17562
Fan#17562 Monday 25th April 2016, 23:07:00
Sure, I understand, thank you.
| Suggested Topics | View / Reply | Forum |
|---|---|---|
| Simon started solved 🇫🇷 Bug de la navbar sur iPad | 1.5K / 5 | Bug reports |
| Fred started Hooks list for developpers | 878 / 0 | Announcements |
| started | 416 / 0 | |
| HD#20af3 started Fixed an error in CSRF.lib.php | 841 / 0 | Bug reports |