color option validator - Githubissues

jbowens / jBBCode

A lightweight but extensible BBCode parser

http://jbbcode.com

MIT License

164 stars 32 forks source link

color option validator #7

Closed jbowens closed 11 years ago

jbowens commented 11 years ago

Right now you can enter arbitrary strings as the color for the default [color] bbcode. This could allow arbitrary CSS styles to be applied or worse, arbitrary javascript to be executed on an event. The [color] bbcode needs an InputValidator for its color option.