Asgaros / asgaros-forum

Asgaros Forum WordPress plugin repository.
https://asgaros.com
GNU General Public License v2.0
90 stars 34 forks source link

HTML in forum descriptions not working anymore, probably since version 2.0.0 #358

Closed FlyThePlanet closed 1 year ago

FlyThePlanet commented 2 years ago

The possibility to add HTML code in the forum descriptions was officially added in version 1.9.1 in June 2018...

1.9.1

  • Fixed: Broken usernames when URL contains certain special characters
  • Fixed: Broken profile URLs when usernames are numeric
  • Fixed: Broken URLs when using certain custom permalink structures
  • Fixed: Dont show last seen-status in profiles/memberslist when who is online-functionality is disabled
  • Changed: Allow HTML in forum descriptions
  • Added: asgarosforum_widget_recent_posts_custom_content hook
  • Added: asgarosforum_widget_recent_topics_custom_content hook

It worked perfectly fine for 4 years, but it's not the case anymore, probably since version 2.0.0... https://www.asgaros.de/support/topic/forum-description-not-interpreting-html/#postid-38552

So could it be possible to fix the issue? It's very useful to be able to add carriage returns, bold/color/underline, URLs or FA icons to forum descriptions.

Thanks!

Asgaros commented 1 year ago

Hello @FlyThePlanet

I got forced by the WordPress Security Team to implement those restrictions. It is NOT allowed anymore to give users the ability to inject Scripts/HTML/etc directly within inputs by user. I know it doesnt make any sense since the user in that case is an admin, but the consequence would have been a delisting from the plugin repository.