Viewing 2 posts - 1 through 2 (of 2 total)
  • Author
    Posts
  • November 13, 2015 at 5:26 pm #535543
    anilpad7

    We are currently using BBPress on our site for a forum. We noticed that it was possible to enter in a script block with an alert box in the middle. On submission, the alert box would be displayed. This could obviously be used in a more malicious way so I had some concerns around this.

    My question is therefore, is there any way that script tags can be filtered out of BBPress posts? .

    November 13, 2015 at 5:36 pm #535563
    Elliott

    Hi anilpad7!

    It would be best to post this on the bbPress support forums. I found this though, https://bbpress.org/forums/topic/allow-html-from-users/.

    Perhaps it’s just admins who can post HTML?

    Cheers!
    Elliott

  • Author
    Posts
Viewing 2 posts - 1 through 2 (of 2 total)
  • You must be logged in to reply to this topic.