SidebarWTFs are not sanitized for mainpage
-
I know it's a plugin and not a core-forum-feature and also the mainpage is going to get redesigned.
I also don't even know if it's Discourses fault, but when creating a title in the Sidebar-catetory the title should be sanitized for mainpage.Reproduction:Create a Topic like this: To proceed, open <filename>.dmg (Sidebar-Category with < >)
Expected Result: The Mainpage title looks the same as the Sidebar-Topictitle
Actual Result:
vs
Bonus: Not sure how Markdown and other craziness works in TopicTitles but one might wanna look into stripping the resulting Title from crazy shenanigens.
BonusBonus: the Outgoing and incoming links would also like this. Seems pretty abusable, actually... Somebody should write a "I agree with whatever Morbs just said"-script for threadtitles
Filed under: I am sure I emerged this Topic from somewhere but it's not showing
-
Yeah. It's bad.
-
Just to test things I will now link to your topic:
Link to said topicIf this thread also gets a pop_up now I feel like we have completely broken Discourse
God, I feel terrible for doing this!
Update:
I guess since it cut off the title nothing happened... So no confimation, yet!UpdateUpdate:
Yep, it happened when I updated the message!just editing this to annoy @Maciejasjmj | Does your Inbox send you a message when I mention you in a tag?
-
Shift+F5 if it doesn't repro immediately.
As an added bonus, I get the alert whenever you ninja-edit the post, which makes replying a pretty fun activity.
-
It makes you wonder about the E-mail-service. Since I usually deactivate all HTML in E-Mails checked the "don't send me mail"-box. I don't know how scripts are handled in those situations! Somebody should look into that, too!
-
-
wow, you can't even stop it because pressing the pause-button activates the link!
-
wow, you can't even stop it because pressing the pause-button activates the link!
I WIN THE INTERNET
-
Make it stop, please! T_T I like to keep this tab open
-
Switch to IE - it actually doesn't work there. I'm just assuming you guys are experiencing the glory but I can't hear it myself.
This is like the browser wars equivalent of launching a tactical nuke.
-
Why has nobody embedded a Rick Astley video yet?
-
Does your Inbox send you a message when I mention you in a tag?
Not if you fail at tagging... It doesn't work in links, apparently.
-
I pray to the Jesus that this is fixed on the main WTF site already. It's been long enough, and it's not our code anyway, so I can't do anything about it.
This topic is now closed. New replies are no longer allowed.