HTML inside posts

2015-05-28 09:30:07

HTML is a more powerful way to format the stuff. Some tags may be longer than BB Code, but it is more formattable. That should make up for the length of some.

If you enable HTML

Nested lists

The present forum BB Code doesn't allow nested lists. HTML does.

<ol type = "i">
	<li>Mammals</li>
	<ul>
		<li>Dog</li>
		<li>Cat</li>
		<li>Human</li>
	</ul>
	<li>Fish</li>
	<ul>
		<li>Bass</li>
		<li>Tuna</li>
	</ul>
</ol>

You cannot replicate the outcome of the above HTML code with BB code on the forum.

Forms

Great for crews and the "Request Bots" team. With these, you can have text boxes, check boxes, and more. Cool, right?

<form action = "www.pizzadelivery.com" method = "get">
	<p>Which pizza would you like? <br>
		<select>
			<option value = "pepr">Pepperoni pizza</option>
			<option value = "mec">Mexican pizza</option>
		</select>
	</p>
	<p>Extra options<br>
		<input type = "checkbox">Extra cheese
		<input type = "checkbox">Extra toppings
	</p>
	<input type = "submit>Order pizza
</form>

CSS

You can put all your css in two <style> tags

The only disadvantage is that they can mess around with it to mess up the forums. You can handle that. JavaScript.

Do try to consider this.

Onjit · 2015-05-28 09:40:56

Ooooooor just leave it the way it is.

If it ain't broke, don't fix it.

Ratburntro44, N1KF, Anch

2015-05-28 12:33:44

What's so bad with adding HTML? Of course, JavaScript can check if it does something "harmful", like downloading a file or something.

With proper CSS, you can do wonders. You can create text-holders and turn them into a circle or something. If <script> tags are allowed, you can create a small game for yourself! Think of what all it can do.

Well, if it is too dangerous to add <script> tags, don't add it! Easy as pie.

Different55 · 2015-05-28 15:42:22

This has been suggested before and is on my to-do list. It'll be in an iframe and will be isolated from the rest of the page. Javascript and plugins will not be allowed.

mrjawapa · 2015-05-28 18:13:31

should probably remove forms too. prevents people from stupidly giving away their info.

Ratburntro44 · 2015-05-28 22:24:12

Sub-list?
1. Right here!
2. Try it!
3. Can we go further?
  1. Look at this!
  2. Amazing!
Yeah, you can make nested lists

Anyways, moving on:

alkazam1448 wrote:

What's so bad with adding HTML? Of course, JavaScript can check if it does something "harmful", like downloading a file or something.
With proper CSS, you can do wonders. You can create text-holders and turn them into a circle or something. If <script> tags are allowed, you can create a small game for yourself! Think of what all it can do.

Well, if it is too dangerous to add <script> tags, don't add it! Easy as pie.

Script tags would be extremely bad to have directly in the forum. Like, really extremely. Allowing any HTML directly inside the forums would probably be a pretty bad idea; while I think Different55 is pretty good, I don't think it's really worth taking the risk of leaving something out even if you do parse it to try to remove anything harmful. Luckily, the approach Diff says he is taking is with iFrames, which is much better than actually allowing it in the posts, but still not really a great solution- personally I think it would be much better to simply not put it in at all. It really isn't necessary in any way. The only really useful things that it would allow would pretty much be precisely the things that would have to be blocked for security purposes.

Different55 wrote:

This has been suggested before and is on my to-do list. It'll be in an iframe and will be isolated from the rest of the page. Javascript and plugins will not be allowed.

Correct me if I'm wrong, but aren't you only able to manipulate content in the frame if it is sourced from the same website? This would imply that the only way to do this is to have the iframes work as pages hosted on the forums, which opens up a whole different can of worms due to the fact that these pages could then have access to the forums' cookies (edit note: I suppose this part could be blocked if you had it on a subdomain that the cookies weren't sent to, but I'm still not really trusting that this will totally secure) unless you manage to do a perfect job of making it secure, which seems like quite a risk for a fairly unnecessary feature.

Official Everybody Edits Forums

#1 2015-05-28 09:30:07