[@_ck_ Participant 16 years, 1 month ago]

Ah, yes all secondary attributes unfortunately have to be disallowed now via bbcode-lite because of the security issue. It’s a quick fix with that side effect.

The trade-off of bbcode-lite is speed, so for security things have to be disallowed instead of trying to parse for all options which would slow things down.

HTML tags are saved when a post is made and then they are done, so it’s fast. But bbcode has to be parsed each and every time a page is displayed, so speed is important.

I guess an advanced feature for a future version would be to convert the bbcode into permanently saved html after the user’s time to edit has passed (ie. an hour). But that kind of sophistication will have to wait.