[NovoCiv]

I finally figured out a fix.

In Plugin Manager find the newreply_quote in the vS Hide Hack section.

Under

PHP Code:

$pagetext = $GLOBALS['hhr']->strip_bbcode($pagetext, 'editor'); 


Add

PHP Code:

$pattern = '/\[hide\](.*)\[\/hide\]/i';
$replacement = " [i]Hide tags Hidden[/i] ";
$pagetext = preg_replace($pattern, $replacement, $pagetext); 


Edit: The first post can still reveal hidden content due to meta tags. There are various ways to fix this but I removed the vulnerability from all but the public sections (who needs meta tags in members only sections anyway?) by changing this to this in Showthread template:

PHP Code:

    <vb:if condition="$threadinfo['keywords']"><meta name="keywords" content="{vb:raw threadinfo.keywords}" /></vb:if>
    <meta name="description" content="{vb:raw thread.meta_description}" /> 


PHP Code:

<vb:if condition="in_array($threadinfo['forumid'], array(28,30,32))">
    <vb:if condition="$threadinfo['keywords']"><meta name="keywords" content="{vb:raw threadinfo.keywords}" /></vb:if>
    <meta name="description" content="{vb:raw thread.meta_description}" />
</vb:if>