|
|
|||||||||
|
|||||||||
|
|||||||||
| |
||
| |||||||||
![]() |
|
|
«
Previous Thread
|
Next Thread
»
|
Thread Tools | Search this Thread | Rate Thread | Display Modes |
|
#1
|
||||
|
||||
|
HTML Entities in code type tags
This probably isn't an urgent thing, but it would be a nice to have.
When posting code samples in code tags can html entities not be translated, for example & quot ; shows as & quot ; rather than " |
|
#2
|
||||
|
||||
|
We try several methods to bypass html entities, but by doing that it will open several security issues.
vBulletin decode all the html entities to determine if some one trying to pass special JavaScript to steal users cookies information ...etc. So its automatically decode all the html entities and filter them out, if we remove this functionality, our forums will be very vulnerable for these kind of hacker attacks. Therefore currently we do not see any direct way to keep html entities inside user posts. |
|
#3
|
||||
|
||||
|
If you were to replace all ampersands [&] with "&", you should
be able to write ""e;". ![]() <edit> Code:
" Code:
" Hold on, that's come out fine. What's the problem here? ![]()
__________________
Support requests via PM will be ignored! Last edited by ChiefWigs1982 : August 10th, 2007 at 11:20 AM. |
|
#4
|
||||
|
||||
|
Try this
Code:
" & q u o t e ; => & q u o t ; |
|
#5
|
||||
|
||||
|
Gotcha.
My idea does work though - change ampersands into numeric entities; notice my second code box above. ![]() & becomes & |
![]() |
| Viewing: ASP Free Forums > Forum Information > Suggestions & Feedback > HTML Entities in code type tags |
| Thread Tools | Search this Thread |
| Display Modes | Rate This Thread |
|
|
|
|