[SOLVED] < and > signs in code

identicon
solved < and > signs in code
Fan#17562 Sunday 24th April 2016, 19:35:57

Hi,
I noticed that if you do < test > between ''' ''', you get

```
< test >
```
But between code/code, you get


< test >

Replies 3
Fred_f8768
Fred#f8768  Sunday 24th April 2016, 22:19:21

Flatboard accepts in part the markdown format.
Because the signs :
< > 

can open the door to malicious code in Javascript, so use the bbcode [code] to normally display the unexecuted html code.
ex: <script>alert('Alert XSS')</script>
In the [Doc page](view.php/plugin/page/p/docs), i authorize all html & markdown content, because only admin post page.
**We must not forget that any intervenor access to the editor to post a new topic or reply.**

identicon
Fan#17562  Monday 25th April 2016, 23:07:00

Sure, I understand, thank you.

identicon
Fred#6f711  Friday 20th May 2016, 21:38:43

test