Blog Documentation Try Vanilla Cloud
Vanilla 1 is no longer supported or maintained. If you need a copy, you can get it here.
HackerOne users: Testing against this community violates our program's Terms of Service and will result in your bounty being denied.

another problem i noticed with v1 upgrade

outbreakoutbreak New
edited July 2006 in Vanilla 1.0 Help
any thread i have using the embed tag is automatically messed up. i tried searching the forum for this but couldnt find anything. i assume it has something to do with the html formatter extension? how would i be able to allow the embed tag (for youtube and such) and not have it completely mess up my page?

Comments

  • MarkMark Vanilla Staff
    Hmmm. I'm going to have to defer to SirNot on this one. He took over the HtmlFormatter a while back and has managed to make it uber-secure. One of the side effects of that security is what you are describing...
  • NickENickE New
    Yeah, I went ahead and disabled the embed tag, largely because it's possible to execute javascript from within flash files. If it's your own forum, though, you could edit the file slightly to allow them, though. You should find a line in the extension which contains a bunch of tags seperated by '|' (...|object|embed|style|applet|...); just take out the tags you don't want filtered out.
  • outbreakoutbreak New
    ah, excellent! problem solved. i assumed that if something was disabled, it would just show the code instead of altering the page completely. thanks guys!
This discussion has been closed.