theforumhelpers.github.io icon indicating copy to clipboard operation
theforumhelpers.github.io copied to clipboard

Forum Helpers List: Escape < and > in user bios rather than removing them

Open penguinmoose opened this issue 2 years ago • 8 comments

Describe the changes needed I think it would be better to escape < and > in user bios instead of simply removing them. That way, people can insert < and > without them being removed and still not interfering with the webpage.

Also, this is the standard way of handling special characters (by escaping them).

< can be replaced with &lt to escape > can be replaced with &gt to escape

Additional context When updating a user’s bio through that user’s dashboard, < and > will be removed in the user’s bio so that they don’t actually become tags when displayed on the webpage. I think it would be better to escape them instead.

penguinmoose avatar Jul 20 '22 21:07 penguinmoose