Greg Netsas

...and here's how allowed_formats works (D8 only):  The reason I have the drop-down open in the screenshot is to show that despite restricting the allowed formats, the "default value"...

@laryn ...yeah. that makes sense about setting the default order. Main point is that I filed this issue as an annoyance/usability issue, but it turns out it also has security...

We might be able to pull it off with a combination of sortable table rows + checkboxes. Mockup:  Too much?

@laryn from the d.org issue (emphasis mine): >If a privileged user account is taken over (for example, through social engineering), the attack surface is large due to the fact that...

...in fact, (although I haven't thought this through very carefully) I think that we can get rid of the initial plain text vs filtered text radio set if we had...

Something like this perhaps:  

Good job @BWPanda ...and nice catch on calling `filter_fallback_format()` instead of pulling from config 👍 I have not tested this extensively either, but it implements the very basics of this...

> ...I can't get the 'plain text' option to work properly. ... someone else is welcome to take over and fix if possible. I might give it a crack 🙂...

> ...I can't get the 'plain text' option to work properly. It keeps getting unset, despite being disabled. It's because of https://www.drupal.org/project/drupal/issues/2911473 / #4083 @BWPanda 😉 ...working on a crossport...

FTR: This feature also made into D10.1.x last November. Change record: [Text fields can enforce a specific text format](https://www.drupal.org/node/3318572) In Drupal, there is FAPI support for this. For example: ```php...