Skip to:

BBPress – Prevent the use of block in forum

  • Lpad7


    We are currently using BBPress on our site for a forum. We noticed that it was possible to enter in a script block with an alert box in the middle. On submission, the alert box would be displayed. This could obviously be used in a more malicious way so I had some concerns around this.

    My question is therefore, is there any way that script tags can be filtered out of BBPress posts?. Or even better, do not allow any HTML/SCRIPT to be entered.

Viewing 1 replies (of 1 total)

  • Robkk


    I think bbPress already does this for users that are not at least an Admin.

    In this gist there is a list of the used tags a participant user can use, well expect for the tables, that was added in the gist as an example of adding more tags.

Viewing 1 replies (of 1 total)
  • You must be logged in to reply to this topic.
Skip to toolbar