Personal Log

[raisdead]

Hello,

I would like to see some enhancements to the personal Log. As a web developer/Programmer myself I understand the difficulties with havering "user data" such as a personal log. I think that the links are a step in the right direction however I would like to see more.

<pre>
For starters (during the transition) I would love to be able to use the <pre> and </pre> to preserve the format of things such as manually spaced tables. This would help to "keep things in alignment" and easily organize content.

<table>
This would be very nice to have. I am not going to explain what a table is because I am sure Wikipedia and w3cschools have a very nice article on it. There are some problems with this. If people use the tables improperly and do not close their tags properly the entire page layout can be "distorted." This can be fix with a regular expression, something like this (forgive me if its not perfect I didn't test it adequately)
<table>(<tr><td>.*</td></tr>)*</table>
(Enable . to match line terminators as well):
This works great if they have one table, however if they embed tables in tables it may be complicated, but not impossible. I would select something like this algorithm.
While there is a valid table
1. Find the last occurrence of a valid table
2. Assign variable equal to the valid table.
3. Replace the valid table with a variable variable


Any other sugestions?

[BenjaminMS]

I *thought* it already was allowed, but not sure. If it isn't, not a bad plan though

[Juliette]

I *thought* it already was allowed, but not sure. If it isn't, not a bad plan though

Some are.. but things like "insert", "form" etcetera are automatically changed.

[CABAL]

Bad. It'll require too much work to block bad tags, and allow good ones.

One little mistake, and the game will be more vulnerable to XSS.

Imagine buying an account. You pay for the account, and get what you pay for. Scammed? Yes. Despite changing the email, one visit to the personal log, and the seller will be able to get back into his account.

For those that don't know what XSS is; google is your friend.

[raisdead]

I know about xss. Why not have a white list? Disallow everything thing that is not white.

Right now I believe that only links are allowed. I mean even <b> is not allowed. I know that there are free implementations of BB code out there. Why not use them?