Quote:
Originally Posted by Zoints
My Media is a completely different entity, it only allows only certain embed code to prevent any malicious code that could jeopardize your forum. The blog entries are a different story though, but we implemented HTMLPurifier to protect against any exploits....the My Media block does not use HTMLPurifier.
I can look into providing you with instructions in how exactly to allow embedded code into your blogs since your members like such a feature, but it would be at your own risk.
|
I'd appreciate those instructions. It would take me a long time to figure it out by myself. If it only worked with youtube for now, that would be great. I don't want to bypass HTMLPurifier, I just want to take advantage of it's whitelisting capabilities. If this were restricted to youtube, the risk is acceptable.