Textpattern CMS support forum
You are not logged in. Register | Login | Help
- Topics: Active | Unanswered
Re: [textile] Textile 2.2
and also rel attributes for links
Yes! Yes! Yes! (jumping in excitement)
And for images too:
!{mystyle}(class#id)/images/myimage.jpg<myrel>(mytitle)!:http://myurl.com
And the most missed feature: same attributes for link aliases as for links and images!
This has been done in Wordpress plugin like 3 year ago:
"my link":alias
[{style}(class#id)alias<rel>(title)]http://myurl.com
That would be … Awesome!
Last edited by lifeJam (2010-11-24 22:46:08)
‘innocence is no excuse’ – Saxon
mobileWarp | cureAnxietyPanic
Offline
#47 2011-01-09 05:25:15
- net-carver
- Archived Plugin Author
- Registered: 2006-03-08
- Posts: 1,648
Re: [textile] Textile 2.2
Folks
I’ve finally got around to pushing a feature-test branch for the rel attributes.
NB: This is test code, do not deploy it on a live site.
You can find the goodies at https://github.com/netcarver/textile/tree/feature-rel-attributes. Please leave your feedback in the github issue tracker against issue 2.
The format I’ve gone with is to use curly braces rather than the rather overloaded ‘<’ & ‘>’ wraps that people have quoted. Anyway, this commit summarizes my proposed format for links and images.
Make sure you pull the code from the feature-rel-attributes branch and remember — this is for testing only.
— Steve
Offline
Re: [textile] Textile 2.2
Good afternoon.
I have a question.
I have a website community, and it has a free registration. Everyone who registers can submit an article. Since I can not have a computer a week or a month, I let the right to publish the article. But today I noticed the vulnerability of the system: any user can insert a script into the body of the article. The system could not verify this. A script can carry harmful functions.
I went to http://textile.sitemonks.com/ and tried. Yahoo! He does not give me introduce <script type="text/javascript"> bad code </ script> .
But after the upgrade classTextile.php problem persists. I can print any script.
In addition, I would like that would be impossible to use txp tags in articles, because that person who knows and wants to hurt textpattern can use it.
Maybe I’m not there to dig?
I understand that many users need the function insert script and txp tags. Can do then is the ability to configure it in Admin -> Preferences -> Advanced.
Or am I missing something?
Thanks in advance for clarification.
I apologize for the poor knowledge of English.
Offline
Re: [textile] Textile 2.2
skrishi wrote:
Or am I missing something?
You probably shouldn’t give a free access to TXP’s backend. The admin area wasn’t exactly designed that in mind.
If you want to give anons free access to publish articles, you probably should build custom article posting form to the site’s public side, for example by using mem_form plugin.
Offline
Re: [textile] Textile 2.2
Yes, thank you … with the script gets it right, by my opinion.
Although I probably would have been safer if all the <> changed to & #60; & #62;
Can I do that?
Last edited by skrishi (2011-03-02 02:54:20)
Offline