HTML Permissions (by usergroup or uid)

[itsmie]

so basically this plugin is safe from xss attack....I don't want that nasty JavaScript thingy.

[Mdkcheatz]

so basically this plugin is safe from xss attack....I don't want that nasty JavaScript thingy.

That would be a no as labrocca has stated.

Anyway, it's still based in UID, meaning, who would be dumb enough to enable HTML for anonymous users?

[labrocca]

Actually that would be YES. It is safe from xss or at least should be.

[Mdkcheatz]

Actually that would be YES. It is safe from xss or at least should be.

oooopse, I meant to say "yes" .... my bad

[hferradj]

Hi,

This is a great plugin thanks a lot!

I have a problem with it though.
I'm trying to embed a video inside a post, but the code that I'm given is not evaluated correctly by the plugin:

Code:

<div id="evp-b5f6c0de57eed018cb0778dd62c92619-wrap" class="evp-video-wrap"></div><script type="text/javascript" src="http://www.theleadingarticles.com/tools/evp/framework.php?div_id=evp-b5f6c0de57eed018cb0778dd62c92619&id=RXh0cmEgLSBDRk9STVNJSS5mbHY%3D&v=1262820152"></script><script type="text/javascript">_evpInit('RXh0cmEgLSBDRk9STVNJSS5mbHY=');</script>

Is there a way to have this kind of code working with this html plugin?

Thanks in advance!

[labrocca]

Script doesn't work for this plugin as a security measure.

You have to alter the plugin file itself and comment out a few lines. You'll see them in the htmlperms function as part of the while statement.

[hferradj]

Thanks! that worked

[Joshua Mayer]

I added this, but I wanted to use <script> so I removed the part disabling script, but it doesn't work. Even before that <b> didn't work (with the closing tags)

[Pirata Nervo]

Not sure if this has been reported already but this plugin does not affect the quick edit function

[labrocca]

What do you mean "does not effect"?