[SOLVED] < and > signs in code
identicon
Fan#17562
DISCUSSION OF ORIGIN

Fan#17562 Sunday 24th April 2016, 19:35:57

solved < and > signs in code

Hi,
I noticed that if you do < test > between ''' ''', you get

```
< test >
```
But between code/code, you get


< test >
DISCUSSION OF ORIGIN
Fred_f8768
Fred#f8768

Administrator

Fred_f8768

See their activity.

Fred#f8768 Sunday 24th April 2016, 22:19:21

Flatboard accepts in part the markdown format.
Because the signs :
< > 

can open the door to malicious code in Javascript, so use the bbcode [code] to normally display the unexecuted html code.
ex: <script>alert('Alert XSS')</script>
In the [Doc page](view.php/plugin/page/p/docs), i authorize all html & markdown content, because only admin post page.
**We must not forget that any intervenor access to the editor to post a new topic or reply.**
identicon
Fan#17562

Fan#17562 Monday 25th April 2016, 23:07:00

Sure, I understand, thank you.
identicon
Fred#6f711

Fred#6f711 Friday 20th May 2016, 21:38:43

test
Suggested Topics View / Reply Forum
http://cmstips.com/ started solved multi languages flatboard 908 / 2 Feature Requests
Fred#f8768 started FlatBoard v0.7.4 Beta 2.3K / 45 Announcements
AlexanderLiebrecht started solved Something went wrong when updating 1.4K / 4 General Questions
c40bc started Rating 1K / 5 Feature Requests
Top