complex html code in message - how to allow & safety iss
Posted: Wed Jun 21, 2006 5:49 am[color=brown]NOTE ]
Hello,
Lately I have been looking at an easy was to allow posters to add google maps in their messages.
The easiest way seems to be the use of GMapEZ (http://bluweb.com/us/chouser/gmapez/), which is quite easy to handle:
- You declare the map and call a javascript function:
- You add some simple html code where you want to display the map](div class="GMapEZ" style="width: 300px; height: 300px;")(a href="http://maps.google.com/maps?ll=41.092104,-85.144740&spn=0.006130,0.009795&t=k&hl=en")(/a)(/div)[/code]
It is very powerful, you can add markers, change their size and color, add lines, etc, etc...
I add the first part of the code in the templates/fisubice/viewtopic_body.tpl, and the code is diplayed after posting, so no problem.
By if I add the following code in a message :
[code](div class="GMapEZ" style="width]
Then that code is completely broke down before being displayed. Even if I have the following html tags allowed : b,i,u,pre,table,tr,td,div,a
I guess it is for safety reason, but is there a way to go around and allow such html code to be displayed in a message? Would there be any risk associated with that?
Any help would be greatly appreciated. I am really blocked by this problem... and really willing to make that work <img>
Thanks,
sanji
Hello,
Lately I have been looking at an easy was to allow posters to add google maps in their messages.
The easiest way seems to be the use of GMapEZ (http://bluweb.com/us/chouser/gmapez/), which is quite easy to handle:
- You declare the map and call a javascript function:
- Code: Select all
(meta name="gmapkey" content="abcdefg" /)(script src="gmapez-2.js" type="text/javascript")(/script)
- You add some simple html code where you want to display the map](div class="GMapEZ" style="width: 300px; height: 300px;")(a href="http://maps.google.com/maps?ll=41.092104,-85.144740&spn=0.006130,0.009795&t=k&hl=en")(/a)(/div)[/code]
It is very powerful, you can add markers, change their size and color, add lines, etc, etc...
I add the first part of the code in the templates/fisubice/viewtopic_body.tpl, and the code is diplayed after posting, so no problem.
By if I add the following code in a message :
[code](div class="GMapEZ" style="width]
Then that code is completely broke down before being displayed. Even if I have the following html tags allowed : b,i,u,pre,table,tr,td,div,a
I guess it is for safety reason, but is there a way to go around and allow such html code to be displayed in a message? Would there be any risk associated with that?
Any help would be greatly appreciated. I am really blocked by this problem... and really willing to make that work <img>
Thanks,
sanji