Quote:
Originally Posted by Hall of Famer
Well the shoutbox uses an old version of CKEditor 3 which is kinda obsolete in today's standards. I will fix this of course in future releases.
|
Can you please make sure to scrub flash embedding and javascript at the least? Those alone would make the shoutbox significantly less dangerous. Personally, I'd want to just exclude HTML from it entirely if you can, but I understand if that's not possible. Maybe replace it with BBcode?