Home Forums Connect Webrings Settings
The Cyberix Network
The sophisticated man's creative playground.
Community: 24 connected
(IRC: 8 | Mumble: 0 | XMPP: 16)

HTML sanitization tests
Oct 5 at 13:43:50 in ???  |  [RSS Feed]


admin ## ADMIN - Oct 5 at 13:43:50 #51876

ONE: </td></tr></table></div>

THIS IS A THREAD

TWO:

THREE: <table width="5000"><tr><td>This forces horizontal scroll

FOUR: <marquee><blink>

<h1><h1><h1><h1>

FIVE: <div></div>

</div></body></html><body><h1>Ne page starts here


Anonymous - Oct 5 at 15:20:59 #51877

What are you experimenting with man?!


Anonymous - Oct 5 at 15:25:39 #51878

WHAT ARE YOU DOING!!!
THIS IS BULLSHIT!!!
OOOOO OOOOO OOOOO
<style>@keyframes blink {50% {opacity: 0;}}</style>
ajspdjpowjpjwapdnOIBOBPDW
<img src="https://media3.giphy.com/media/v1.Y2lkPTc5MGI3NjExc2tuczBpdnc2a2ZmNjJhYjV2YXhna2pyODR3MHhlbm83OHhwc3dmYiZlcD12MV9pbnRlcm5hbF9naWZfYnlfaWQmY3Q9Zw/euJPeV3qYZI64/giphy.gif" width="100">


Anonymous - Oct 5 at 15:31:48 #51879

i think we're good now


admin ## ADMIN - Oct 5 at 15:37:02 #51880

has been kilt.

N o t h i n g i s s t o p p i n g y o u f r o m h a v i n g c o l o r e d t e x t , t h o u g h


Anonymous [Tor] - Oct 6 at 07:58:59 #51896

What's the rationale behind blocking <div>? As far as I know, it doesn't do anything more than other elements.


Anonymous [Tor] [DATACENTER] - Oct 6 at 08:13:07 #51897

Random idea if you want to allow arbitrary HTML posting: put every post in an iframe.


admin ## ADMIN - Oct 6 at 15:27:04 #51909

I can't into properly sanitizing HTML apparently so I killed

and . I will most likely need to make this system more intricate

Colored text should remain though


admin ## ADMIN - Oct 6 at 15:27:46 #51910

>put every post in an iframe.
Could consider it but I feel like that'd have such a horrible performance hit that I don't know if its worth it. I'll look into that anyway though


admin ## ADMIN - Oct 6 at 15:31:45 #51911

There's a lot of things wrong with my text formatter. All user text, both articles and posts are run through this single formatting system.

Recent changes fucked up where newlines/breaks are placed, my wonderful attempt at allowing both BBCode and Markdown work but the Markdown implementation I'm using is interfering with what I'm doing to properly break lines
HTML sanitization was laughably weak and probably still is now. I think I might resort to just looking at HTML standards from 30 years ago and not allowing anything newer. I was using for font colors when still works fine.

I'll keep working on this


admin ## ADMIN - Oct 6 at 16:47:09 #51913

>There's a lot of things wrong with my text formatter.

spoke too fuckin soon and I quadruple-posted