Adding Spoiler Tags

[UT11_Seller]

Hi, not sure if it's been suggested but would it be possible to add spoiler tags? Some of my selling threads are picture heavy and it would look a lot neater with a spoiler button to put them in, thanks.

 

[n4n0]

This will probably have to wait until vb4 which is hopefully in the not-too-distant future. We're just waiting for the skin competition to finish and I'm thinking (and hoping) vb4 will be soon to follow.

 

[mage3158]

This will probably have to wait until vb4 which is hopefully in the not-too-distant future. We're just waiting for the skin competition to finish and I'm thinking (and hoping) vb4 will be soon to follow.

I think spolier tags exist in vb3, but I could just be remembering things wrong.

 

[Brendan]

I think spolier tags exist in vb3, but I could just be remembering things wrong.

They do, Sythe once had them enabled before. However I don't think they want to implement anything now as it'd be a bit of unnecessary effort for something there isn't a rush to implement.

Matthew stated there are some problems with this here: http://ww3.sythe.org/showthread.php?t=1306913

 

[Im_going_far]

It's not really needed to tell you the truth, However it could make threads much neater and make pages load much faster.

Support.

p.s. when will bv4 come out?

 

[n4n0]

It's not really needed to tell you the truth, However it could make threads much neater and make pages load much faster.

Support.

p.s. when will bv4 come out?

We're waiting on the skin competition to finish (Currently deadlined for the 14th) before any decisions are made. As of right now, it "SEEMS" like it may be towards the end of the month, but this is no guarantee.

 

[Vu1]

Not a bad idea

 

[Annex]

The problem with spoiler tags is unnecessary javascript being run and because javascript is an entirely unsecure and (IMO) unnecessary language you run into the issue of some smart bastard splitting up javascript commmands over the course of the two variables passed off to php to run the page which ends up allowing the spoiler to run javascript redirects which sends them to a page which allows the smart bastard to session hijack an admin ECT.

 

[Govind]

The problem with spoiler tags is unnecessary javascript being run and because javascript is an entirely unsecure and (IMO) unnecessary language you run into the issue of some smart bastard splitting up javascript commmands over the course of the two variables passed off to php to run the page which ends up allowing the spoiler to run javascript redirects which sends them to a page which allows the smart bastard to session hijack an admin ECT.

^ This.

Custom BBCode with Javascript in it is exploit (and bug) prone. We've learned this the hard way more than once.

 

[Noam]

Can't PHP parse it to remove the >, <, %3C, %3E? that should be enough to make it impossible to hijack it
Either way it is simpler just to install a safe spoiler plugin for VB4

 

[cosrob97]

Not going to happen due to exploits and such.