Fred#f8768 Sunday 24th April 2016, 22:19:21

Flatboard accepts in part the markdown format.
Because the signs :

< > 

can open the door to malicious code in Javascript, so use the bbcode [code] to normally display the unexecuted html code.
ex: <script>alert('Alert XSS')</script>
In the [Doc page](view.php/plugin/page/p/docs), i authorize all html & markdown content, because only admin post page.
**We must not forget that any intervenor access to the editor to post a new topic or reply.**

Fan#17562 Monday 25th April 2016, 23:07:00

Sure, I understand, thank you.

Fred#6f711 Friday 20th May 2016, 21:38:43

test