Open jzelinskie opened 11 years ago
My current vote is https://github.com/frol/postmarkup
The "bbcode" PyPI package is at least vulnerable to trivial CSS injection, which can be used for fun things like clickjacking, and it seems to have no concept of actually whitelisting inputs. We'd have to put in a decent amount of elbow grease to fix it.
Python BBcode libraries don't appear to be that popular >_>
How about ReStructuredText as a markup of choice?
I'm more pro-markdown.
Choices:
Pros of Markdown:
Pros of rST:
Pros of BBCode:
Cons of Markdown:
Cons of rST:
Cons of BBcode:
After some internal discussion within AB we've decided that as AB we're going to stick with BBcode.
I'm probably going to commit and push what I've got then reassign to @endoscient since he knows what's up ;)
We discussed it a little bit in IRC and continuing to use BBCode is probably the best for comments/forum posts, but the quality in BBCode libraries is pretty low and we need support for our own custom types like the spoiler tag. Ideas welcome.