Sciencemadness Discussion Board

How do you get HTML to work in a post?

yobbo II - 14-8-2024 at 02:39


How do you get HTML to work in a post:

like
<table><tr><td>ssss</table>

Yob

[Edited on 14-8-2024 by yobbo II]

Fulmen - 14-8-2024 at 09:18

http://www.sciencemadness.org/talk/faq.php?page=messages#7

Texium - 14-8-2024 at 14:29

Actual HTML was disabled in posts several years ago because it posed a huge security risk for the site. Unfortunately that has led to many posts that used it becoming nearly incomprehensible.

yobbo II - 14-8-2024 at 14:57


I'm no hacker but how would HTML pose a security risk?

Yob

woelen - 14-8-2024 at 23:26

Embedded HTML could contain scripts (e.g. Javascript), which can do all sorts of things on the client browser.
If you allow embedded HTML, then certain tags should not be allowed, e.g. <script> and </script> can be used for Javascript, and these should not be allowed. I am no HTML expert, but there most likely are other tags, which pose a security risk. All of these must be disallowed and the forum software should actively filter out such tags when something is posted. I'm not sure whether the sciencemadness forum software does this.