TeaSpeak icon indicating copy to clipboard operation
TeaSpeak copied to clipboard

Strip [IMG] from channel_description

Open Bluscream opened this issue 7 years ago • 4 comments

On most servers channel descriptions are only disabled because they can be abused for ip grabbing via embedded images (ex: https://grabify.link/image/)

  • [x] To encourage serveradmins to allow channel descriptions again i would suggest adding a new permission called b_channel_create_modify_with_images that; if not granted replaces all \[[Ii][Mm][Gg]\],\[/[Ii][Mm][Gg]\] with [url]/[/url] everytime the channel_description is set/modified so all images become clickable links. That would mean the comeback of descriptions for guests :)

  • [ ] In addition to that i am also thinking about a paranoid mode that replaces all [url=<url>]<text>[/url] with [url]<url>[/url] in channel descriptions and chat messages/pokes with a attached permission called b_client_mask_links tho that may be a bit too much.

Bluscream avatar Apr 22 '18 04:04 Bluscream

Bluscream avatar Apr 22 '18 05:04 Bluscream

Implemented

WolverinDEV avatar Jun 15 '18 18:06 WolverinDEV

b_client_use_bbcode_any, b_client_use_bbcode_url, b_client_use_bbcode_image

Can you explain them a bit more?

Bluscream avatar Jan 10 '19 05:01 Bluscream

b_client_use_bbcode_any => use any bb codes b_client_use_bbcode_url use the bb code [url]...[/url] b_client_use_bbcode_image use the bb code [img]...[/img]

WolverinDEV avatar Jan 10 '19 19:01 WolverinDEV