Previous Thread
Next Thread
Print Thread
Hop To
#256917 05/03/2015 1:03 PM
Joined: Jul 2006
Posts: 4,057
Joined: Jul 2006
Posts: 4,057
1. Ive added a <space> after the word chrome so you can see what it should say.
2. Then what happens with out the space.

1. chrome ://flags/#enable-npapi
2. chrome://flags/#enable-npapi

onoes onoes onoes onoes

< suhosin Free Zone > lol


BOOM !! Version v7.6.1.1
People who inspire me Isaac ME Gizmo
Mark S #256922 05/03/2015 5:43 PM
Joined: Apr 2004
Posts: 1,974
Likes: 154
UBB.threads Developer
UBB.threads Developer
Joined: Apr 2004
Posts: 1,974
Likes: 154
Since "chrome:" is not a standard web url protocol. It is specific to the browser/software a person has installed on their device.

Protocol standards are http/https.

"chrome:" is unique only to users who have Google Chrome installed on their devices. The "about:" tag is also unique to what the user has installed on their device. These features allow that user to configure their Google Chrome browser software -- in the same way that the "about:" flags allow a user to configure their Mozilla Firefox software. Directly linking to these features from within UBBCode is beyond the scope of the intentions of UBB.threads. If you want to allow direct-link access to a user's browser settings, give that user access to post using "HTML" -- be warned though, allowing users to create posts with HTML can open up risks to your site.

Beyond allowing users to post with HTML code, have you tried adding these proprietary protocols to your custom tags?

Control Panel > Content Rebuilder > Custom Tag Editor
/admin/rebuildcontent.php?returntab=1


I'm look further in to this now. And there goes my Sunday.... lol

Last edited by id242; 05/03/2015 6:18 PM.

current developer of UBB.threads php forum software
current release: UBB.threads 8.0.0 // wip: UBB.threads 8.0.1
isaac @ id242.com // my forum @ CelicaHobby.com
Mark S #256923 05/03/2015 6:29 PM
Joined: Jul 2006
Posts: 4,057
Joined: Jul 2006
Posts: 4,057
Ive never typed anything like it or will again.
Just feedback.

Enjoy your Sunday if you can.


BOOM !! Version v7.6.1.1
People who inspire me Isaac ME Gizmo
Mark S #256924 05/04/2015 4:15 AM
Joined: Apr 2004
Posts: 1,974
Likes: 154
UBB.threads Developer
UBB.threads Developer
Joined: Apr 2004
Posts: 1,974
Likes: 154
Mark, you're correct. You did find a bug.

UBB.threads was attempting to add URL BBCode around the outside of non-acceptable URL protocols. The bug seems to have existed for most of the 7.5.x series of UBB.threads. I've made the corrections to the code and now only the three acceptable protocols will be parsed. These corrections will be available in 7.6.0+

Thanks for the good find!

---

NOTES:
For security, the protocols accepted by the [url] tag will only accept local (relative) URLs, and URLs that use the http:, https:, or ftp: protocols. In particular, it will not accept any URL that uses protocols such as the javascript: protocol. This limitation is for security reasons, and can prevent code injection on your site. This includes any non-standard usage of the protocol format, such as chrome:, and about:.


current developer of UBB.threads php forum software
current release: UBB.threads 8.0.0 // wip: UBB.threads 8.0.1
isaac @ id242.com // my forum @ CelicaHobby.com

Link Copied to Clipboard
ShoutChat
Comment Guidelines: Do post respectful and insightful comments. Don't flame, hate, spam.
Recent Topics
Profile avatar storage settings
by SenecaFlyer - 12/05/2024 1:24 PM
Not allowing attachment over 2m
by ehill - 12/03/2024 3:16 PM
New Admin Here
by SenecaFlyer - 12/02/2024 4:14 PM
Who's Online Now
3 members (Ruben, SenecaFlyer, 1 invisible), 827 guests, and 80 robots.
Key: Admin, Global Mod, Mod
Random Gallery Image
Latest Gallery Images
Los Angeles
Los Angeles
by isaac, August 6
3D Creations
3D Creations
by JAISP, December 30
Artistic structures
Artistic structures
by isaac, August 29
Stones
Stones
by isaac, August 19
Powered by UBB.threads™ PHP Forum Software 8.0.1
(Snapshot build 20240918)