Skip to:
Content
Pages
Categories
Search
Top
Bottom

BBPress – Prevent the use of block in forum


  • Lpad7
    Participant

    @lpad7

    We are currently using BBPress on our site for a forum. We noticed that it was possible to enter in a script block with an alert box in the middle. On submission, the alert box would be displayed. This could obviously be used in a more malicious way so I had some concerns around this.

    My question is therefore, is there any way that script tags can be filtered out of BBPress posts?. Or even better, do not allow any HTML/SCRIPT to be entered.

Viewing 1 replies (of 1 total)

  • Robkk
    Moderator

    @robkk

    I think bbPress already does this for users that are not at least an Admin.

    In this gist there is a list of the used tags a participant user can use, well expect for the tables, that was added in the gist as an example of adding more tags.

    https://gist.github.com/ntwb/7797990

Viewing 1 replies (of 1 total)
  • You must be logged in to reply to this topic.
Skip to toolbar