Answer by Pascal MARTIN for Displaying user input on my page
A solution would be to filter the HTML, to make sure it's "OK" :Valid HTMLThat only contain the tags you want to allowAnd doesn't cause any security problem.A great tool that does that is...
View ArticleAnswer by cjensen for Displaying user input on my page
Its thats not a bad idea, but why dont you validate the html before you save it? Or is it not bad just plain ugly? Most editors do have i.e clean office formatting. Or is it a bussiness requirement to...
View ArticleAnswer by Daniel Vassallo for Displaying user input on my page
You may want to consider limiting your users to Markdown, just like what Stack Overflow uses for profiles, answers, etc.For further reading, you may want to check the following:Stack Overflow: “Safe”...
View ArticleDisplaying user input on my page
In our application, we allow user's to write their Bio using a WYSIWYG editor, but it often contains bad HTML that breaks our page. Is it a good idea to show the user bio inside an iframe so it doesn't...
View Article
