Please upgrade here. These earlier versions are no longer being updated and have security issues.
HackerOne users: Testing against this community violates our program's Terms of Service and will result in your bounty being denied.
Options
Add CSS background image in the forum posts?
Koboldco
New
Good evening - I have a problem/question. I run a website where I am trying to add a CSS background-image to one of the posts. In the WSYWIG editor, it looks great and exactly how I want it, however, once I post it, it does not show up.
Any help? Is there something editing this out?
Here is the post in question - http://www.koboldcompany.com/discussion/4/campaign-story-line#Item_10
Tagged:
0
Comments
Actually, I can see in the HTML this:
style="background-image:url('denied:http://www.koboldcompany.com/xyz.jpg');
Where do I go in the code to change it to allow "background-image" ?
well that I had not noticed, it never occurred to me to use a background image in a post...I tried using div style but got denied ... it may have to do with the editor to protect the general style. When I erased the denied part it erased the editor....
You might be able to use
span style="background:url(image);width:100%;height:100%;" etc.. adjust as you see fit.
also you can use table style
❌ ✊ ♥. ¸. ••. ¸♥¸. ••. ¸♥ ✊ ❌
I tried span too with the same result. I guess it could be the editor; I hadn't thought of that. I assumed it to be the vanilla software itself. Hmmmm...
Any other thoughts?
By the way, this is the same person as the poster. I did the "Facebook Login" under the wrong account last night and ended up somehow creating a new account vs. this original one. >:(
the reason why this is normally striped is becuase is can be used maliciously, to to mislead, or just mess about with the layout.
The default htmLawed determines what you can an cannot do. Only if you truly understand the risks should you override.
grep is your friend.
It's a private forum. It's definitely not something I would do on an open forum. Is the htmLawed a file in the system or in something else?
it is in the plugins folder
My thinking is blocking is the absolute url. For instance
background:url('../../applications/dashboard/design/images/vanilla-forums-light-bg-70x33.png') no-repeat scroll center center;width:100px;height:50px;;width:100px;height:50px;border: 1px solid red;`vs.
background:url('http://vanillaforums.org/applications/dashboard/design/images/vanilla-forums-light-bg-70x33.png') no-repeat scroll center center;width:100px;height:50px;;width:100px;height:50px;border: 1px solid red;which actually gives
background:url('denied:http://vanillaforums.org/applications/dashboard/design/images/vanilla-forums-light-bg-70x33.png') no-repeat scroll center center;;width:100px;height:50px;border: 1px solid red;`This is an advanced html Lawed topic you would have to consult their site.
basically it won't let you just put urls in any old attribute.
grep is your friend.
Ahh....well, that would work just fine. Let me try that.
That did indeed work! Thank you very much for your expertise!
no worries.
grep is your friend.
Or post some nasty java, javascript is also not allowed I noticed.
Wow very interesting...I guess one can also further restrict what people can post also very cool !
yea it would be disastrous if people could mess with the main style.
❌ ✊ ♥. ¸. ••. ¸♥¸. ••. ¸♥ ✊ ❌