search

hemebond / quaddicted

Quaddicted upgrade written with Django
MIT License
7 stars 1 forks source link

Check input limits on comments #35

Closed hemebond closed 3 years ago

hemebond commented 3 years ago

Especially anonymous comments.

SpiritQuaddicted commented 3 years ago

I'd be fine with a really large limitation on length (4096 characters?) just to not allow anything that could be a technical issue.

Content-wise anything text should be fine, emojis, whatever. Of course there needs to be proper handling to avoid any kind of malicious injections. I have strong feelings against embedding anything non-text like images or videos.

I liked having Markdown but am not sure it was a good idea for the issue of links_with_underscores alone, at least currently where people cannot edit their posts. Some sort of markup system (I like Markdown but bbcode is often enough) would be great!

hemebond commented 3 years ago

The max length is just the default for django-contrib-comments, 3000.