Disabling certain stuff for my forum

Tony abletony84 at gmail.com
Sun Aug 12 19:46:49 EDT 2012


Cool - thanks a lot for the reply!

I think I'll just go for CSS now, although it would be cool to have some
sorta Markdown config file where you could disable certain elements.

Tony

On Sun, Aug 12, 2012 at 7:28 PM, Alan Hogan <contact at alanhogan.com> wrote:


> 1. You can always take the result and process the DOM. E.g., use something

> like Nokogiri / hpricot to convert <h1>, <h2> nodes (etc) to <p> or even

> <p><b></b></p>.

>

> 2. You can simply use CSS to limit the size of text in the comment fields

>

> 3. Please note that you must sanitize Markdown input (or disable the raw

> HTML feature) if you will be accepting user-generated Markdown, for

> security reasons. There is a common set of XSS inputs to test against.

>

> On Aug 12, 2012, at 10:03 AM, Tony <abletony84 at gmail.com> wrote:

>

> Hey!

>

> Is it possible to disable stuff such as headings? I want to use Markdown

> for my forum but I don't want to allow headings as I believe some users

> will exploit them to gain more attention. Have anybody been in a similar

> situation before? Let me know what you did. Thanks.

>

> Tony

> _______________________________________________

> Markdown-Discuss mailing list

> Markdown-Discuss at six.pairlist.net

> http://six.pairlist.net/mailman/listinfo/markdown-discuss

>

>

> Alan Hogan

> *Sent via virtual pigeon*

>

>

> _______________________________________________

> Markdown-Discuss mailing list

> Markdown-Discuss at six.pairlist.net

> http://six.pairlist.net/mailman/listinfo/markdown-discuss

>

>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://six.pairlist.net/pipermail/markdown-discuss/attachments/20120813/ce1d1ee3/attachment.html>


More information about the Markdown-Discuss mailing list