[SOLVED] < and > signs in code
Fan#17562
DISCUSSION OF ORIGIN
Fan#17562 Sunday 24th April 2016, 19:35:57
solved < and > signs in code
Hi,I noticed that if you do < test > between ''' ''', you get
```
< test >
```
But between code/code, you get
< test >
Fred#f8768
Fred#f8768 Sunday 24th April 2016, 22:19:21
Flatboard accepts in part the markdown format.Because the signs :
< > can open the door to malicious code in Javascript, so use the bbcode [code] to normally display the unexecuted html code.
ex: <script>alert('Alert XSS')</script>
In the [Doc page](view.php/plugin/page/p/docs), i authorize all html & markdown content, because only admin post page.
**We must not forget that any intervenor access to the editor to post a new topic or reply.**
Fan#17562
Fan#17562 Monday 25th April 2016, 23:07:00
Sure, I understand, thank you.
| Suggested Topics | View / Reply | Forum |
|---|---|---|
| 333b98 started Problem with topics updating on topic view (most recent populates first) | 937 / 1 | Bug reports |
| PI started New pages | 1.2K / 2 | General Questions |
| AlexanderLiebrecht started 🇩🇪 First feedback on Flatboard v1.0 | 647 / 0 | General Questions |
| Fan#17562 started solved What is the notification center? | 1.2K / 2 | General Questions |