martec

related discussion: https://community.mybb.com/thread-232217.html for me it should store templates in database https://twig.symfony.com/doc/3.x/recipes.html#using-a-database-to-store-templates so it will make it much easier to resolve the issues raised in this ticket, I believe.

XSS in question is the same one that was fixed by the Mybb team. This is not a new XSS. Of course, the correction method is different. for me, the...

@live627 thanks for information. for me about this issue https://github.com/samclarke/SCEditor/pull/767 the mybb team already fixed. I did not know that there was another one besides the one that was fixed...

Isn't it just getting the original code from the sceditor that solves it? find https://github.com/mybb/mybb/blob/feature/jscripts/bbcodes_sceditor.js#L543-L551 ``` var url = $(element).attr('src'), width = $(element).attr('width'), height = $(element).attr('height'), align = $(element).data('scealign'); var...

@Sama34 since mybb 1.8.23 https://github.com/mybb/mybb/commit/d71828a2528806c82f317e0428d3239ca3511f7b#diff-9b35a29949a0a750bac144569a549a16b33490230fbee9f5f02b41dd0823e3c5 made a change in the editor code to resolve another bug. Before than 1.8.23 the editor used original source code for image tag. Which calculated...

@Sama34 sorry if i got it wrong, but my understanding and what i posted. Since the author says that this worked as it should until mybb 1.8.22.

> > > Previously when you used "img width=700", forum would calculate height and it would be something like "img=700x235" for example. This functionality doesn't work anymore. > > If...

@samclarke plz check this. To avoid create same tag when press enter. https://github.com/samclarke/SCEditor/issues/181#issuecomment-57037618

@brunoais what logic to put same tag in all line? make sense? https://github.com/samclarke/SCEditor/issues/181#issuecomment-57106654

@brunoais you tried other editor? for me not made any sense. Only polute message. And it is not easy to convince all users to press ctrl + enter. This is...