HTML in comments

Random stuff about serendipity. Discussion, Questions, Paraphernalia.
Post Reply
nyquil

HTML in comments

Post by nyquil »

I've been trying to figure out for a while how to get html displayed in comments. I installed the HTML as entities plugin, which is close to what I want, but is there another plugin that I'm overlooking that actually enables the browser to render those entities?

I guess I just don't understand why comments are treated differently than the body. I can see having the ability to disable html markup, but I can't understand why it wouldnt be able to do it.

Am I just overlooking the obvious?
garvinhicking
Core Developer
Posts: 30022
Joined: Tue Sep 16, 2003 9:45 pm
Location: Cologne, Germany
Contact:

Re: HTML in comments

Post by garvinhicking »

Comments can never contain HTML code. Serendipity strips them out completely, as HTML in comments is the worst thing to do in any open Wiki or Blog system as every user can put dangerous javascript into your blog and steal login cookies or do other nasty things.

So because of security reasons what you want can never be fulfilled, I'm sorry. Your users will need to learn BBCode or other markups like WikiMarkup to format their comments.

Regards,
Garvin
# Garvin Hicking (s9y Developer)
# Did I help you? Consider making me happy: http://wishes.garv.in/
# or use my PayPal account "paypal {at} supergarv (dot) de"
# My "other" hobby: http://flickr.garv.in/
Post Reply