using markdown in a forum?

Louis-David Mitterrand vindex+lists-markdown-discuss at apartia.org
Wed May 5 10:03:38 EDT 2010


On Sun, May 02, 2010 at 02:23:28PM +0200, Allan Odgaard wrote:

> On 2 May 2010, at 14:01, Aristotle Pagaltzis wrote:

>

> >>[...] you want to filter out HTML tags [...]

> >[...] And it's not impossible to write a 100% solid filter if you

> >use a *white*list applied to a real HTML parser.

>

> Not sure what you mean by "real HTML parser".

>

> One thing to watch out for is improper HTML when users type a

> literal '<'. I had a lot of users lose part of their comments

> because everything after a standalone '<' was incorrectly filtered.

>

> This was with WordPress + PHPMarkdown (blog comments). What made it

> worse was that it was the filtered content which went into the

> database, so once filtered, the content was gone.


I'm planning in using HTML::Scrubber (my app is mod_perl).

What would be a "reasonable defaults" whitelist for html tags in a forum
context?

Thanks,


More information about the Markdown-Discuss mailing list