Announcement

Collapse
No announcement yet.

Highlight BB code XSS safe?

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • Highlight BB code XSS safe?

    I am a little paranoid about XSS lately.

    Is the HL bb code XSS safe? Or is the color option a door? Please excuse my ignorance. I am curious.

    Code:
     			 				5. Highlight Text
    
    Title
    Highlight Text
    Tag
    hl
    Replacement
    <span style="background-color:{option}">{param}</span>
    Example
    [hl=#adbff3]Some Text[/hl]
    Description
    This BbCode will add a highlight to the selected text.
    Use {option}
    Yes
    Button Image
    <- Save image to your hard drive

  • #2
    Looks fine to me. It's going to expect either a hex code or word (red, blue etc), not a URL, so no chance of XSS.

    Comment


    • #3
      Glad to hear it. Thanks!

      Comment

      widgetinstance 262 (Related Topics) skipped due to lack of content & hide_module_if_empty option.
      Working...
      X