[SOLVED] < and > signs in code
Fan#17562
DISCUSSION OF ORIGIN
Fan#17562 Sunday 24th April 2016, 19:35:57
solved < and > signs in code
Hi,I noticed that if you do < test > between ''' ''', you get
```
< test >
```
But between code/code, you get
< test >
Fred#f8768
Fred#f8768 Sunday 24th April 2016, 22:19:21
Flatboard accepts in part the markdown format.Because the signs :
< > can open the door to malicious code in Javascript, so use the bbcode [code] to normally display the unexecuted html code.
ex: <script>alert('Alert XSS')</script>
In the [Doc page](view.php/plugin/page/p/docs), i authorize all html & markdown content, because only admin post page.
**We must not forget that any intervenor access to the editor to post a new topic or reply.**
Fan#17562
Fan#17562 Monday 25th April 2016, 23:07:00
Sure, I understand, thank you.
| Suggested Topics | View / Reply | Forum |
|---|---|---|
| AlexanderLiebrecht started 🇩🇪 Feedback about Flatboard v1.0 RC 2 | 1K / 1 | General Questions |
| Alexander Liebrecht started solved Quote in Topics not worked | 925 / 2 | Bug reports |
| Cyrille BORNE started Publicité | 1.2K / 2 | Open Bar |
| Fred#3c4613 started plugin Google Tools | 2.9K / 10 | Resources |