Hey, @p, can we get an interface for rich text on our posts? It's a minor inconvenience to have to switch to HTML and manually add the <b>'s and <i>'s and shiet.
If you need an example, I hear Gab Pro subscribers get to post with rich text and it has an interface.
This is the site I was talking about: https://gab.com
If you need an example, I hear Gab Pro subscribers get to post with rich text and it has an interface.
This is the site I was talking about: https://gab.com
@rasterman @p Using HTML in posts poses security risks. I'm surprised that you guys are using it in current year.
Yes, I understand; but I think I'm willing to run that risk.
@rasterman @xianc78 @p
You should have seen the spinning posts when things were not sanitized nicely. (And that's just a benign proof of ability.)
You should have seen the spinning posts when things were not sanitized nicely. (And that's just a benign proof of ability.)
@rasterman @p @xianc78
Sure, sorry.
If you allow non-sanitized user html people can write scripts that affect the post in funny ways (like making all the text spin) and also probably some malicious ways. This also effected 4chan with the eval() posting worm, so it's not really new or unique to fedi.
Sure, sorry.
If you allow non-sanitized user html people can write scripts that affect the post in funny ways (like making all the text spin) and also probably some malicious ways. This also effected 4chan with the eval() posting worm, so it's not really new or unique to fedi.
Follow
@moth @p @rasterman It was also used as an exploit to create custom backgrounds for Facebook pages back in the day. I'm surprised that a site like Facebook let that slip.
