search

wardrobecms / wardrobe-archived

A minimal blogging application
http://wardrobecms.com/
MIT License
705 stars 111 forks source link

Post Body #40

Open gremdev opened 9 years ago

gremdev commented 9 years ago

Hi, please escape input/output data especially in the post's body. When I try to add javascript alert it was rendered by the browser. This may cause issues.

rtablada commented 9 years ago

The point of the editor is to have a WYSIWYG Markdown editor.

If you would like to include code in your posts, you can use a code block in markdown.

If you still want to escape all special chars, then the markup created by the editor will show up.

Therefore, this markdown:

This is my first post.
Lorem.

Another paragraph
<p>This is my first post.
Lorem.</p>

<p>Another paragraph</p>