Site Links
Home
Features
Documentation
Pricing & Order
Members Area
Support Options
UBBDev.com
UBBWiki.com
Who's Online Now
2 registered members (M4TT, mmkk), 63 guests, and 393 spiders.
Key: Admin, Global Mod, Mod
Member Spotlight
whk
whk
Portsmouth, RI
Posts: 86
Joined: January 2009
Show All Member Profiles 
Top Posters(30 Days)
Gizmo 16
M4TT 12
FREAK 11
Ruben 6
mmkk 5
isaac 4
Latest Photos
Chinese Buddhist temple.
My buddha beads.
Rendered Walls
Multi-Screen wallpaper
Stockholm Metro
Previous Thread
Next Thread
Print Thread
7.5.9 Bug : Regex #256917
05/03/15 01:03 PM
05/03/15 01:03 PM
Joined: Jul 2006
Posts: 4,704
Liverpool : England : UK
Mark S Offline OP
Mark S  Offline OP

Joined: Jul 2006
Posts: 4,704
Liverpool : England : UK
1. Ive added a <space> after the word chrome so you can see what it should say.
2. Then what happens with out the space.

1. chrome ://flags/#enable-npapi
2. chrome://flags/#enable-npapi

onoes onoes onoes onoes

< suhosin Free Zone > lol


Version v7.5.8
People who inspire me Gizmo ID242 SD
Its been a long road. . . .to be waiting
Express Hosting
Express Hosting "We are the official hosting company of UBB.threads. Ask us about our free migration services to migrate your UBB.threads installation."
Re: 7.5.9 Bug : Regex [Re: Mark S] #256922
05/03/15 05:43 PM
05/03/15 05:43 PM
Joined: Apr 2004
Posts: 1,004
California
isaac Offline
UBB.threads Developer
isaac  Offline
UBB.threads Developer
Joined: Apr 2004
Posts: 1,004
California
Since "chrome:" is not a standard web url protocol. It is specific to the browser/software a person has installed on their device.

Protocol standards are http/https.

"chrome:" is unique only to users who have Google Chrome installed on their devices. The "about:" tag is also unique to what the user has installed on their device. These features allow that user to configure their Google Chrome browser software -- in the same way that the "about:" flags allow a user to configure their Mozilla Firefox software. Directly linking to these features from within UBBCode is beyond the scope of the intentions of UBB.threads. If you want to allow direct-link access to a user's browser settings, give that user access to post using "HTML" -- be warned though, allowing users to create posts with HTML can open up risks to your site.

Beyond allowing users to post with HTML code, have you tried adding these proprietary protocols to your custom tags?

Control Panel > Content Rebuilder > Custom Tag Editor
/admin/rebuildcontent.php?returntab=1


I'm look further in to this now. And there goes my Sunday.... lol

Last edited by id242; 05/03/15 06:18 PM.
Re: 7.5.9 Bug : Regex [Re: Mark S] #256923
05/03/15 06:29 PM
05/03/15 06:29 PM
Joined: Jul 2006
Posts: 4,704
Liverpool : England : UK
Mark S Offline OP
Mark S  Offline OP

Joined: Jul 2006
Posts: 4,704
Liverpool : England : UK
Ive never typed anything like it or will again.
Just feedback.

Enjoy your Sunday if you can.


Version v7.5.8
People who inspire me Gizmo ID242 SD
Its been a long road. . . .to be waiting
Re: 7.5.9 Bug : Regex [Re: Mark S] #256924
05/04/15 04:15 AM
05/04/15 04:15 AM
Joined: Apr 2004
Posts: 1,004
California
isaac Offline
UBB.threads Developer
isaac  Offline
UBB.threads Developer
Joined: Apr 2004
Posts: 1,004
California
Mark, you're correct. You did find a bug.

UBB.threads was attempting to add URL BBCode around the outside of non-acceptable URL protocols. The bug seems to have existed for most of the 7.5.x series of UBB.threads. I've made the corrections to the code and now only the three acceptable protocols will be parsed. These corrections will be available in 7.6.0+

Thanks for the good find!

---

NOTES:
For security, the protocols accepted by the [url] tag will only accept local (relative) URLs, and URLs that use the http:, https:, or ftp: protocols. In particular, it will not accept any URL that uses protocols such as the javascript: protocol. This limitation is for security reasons, and can prevent code injection on your site. This includes any non-standard usage of the protocol format, such as chrome:, and about:.


Shout Box
Today's Birthdays
No Birthdays
Recent Topics
Users Unable to Upload Avatar
by M4TT. 12/13/17 08:51 AM
Shout Box Sound Effect
by M4TT. 11/29/17 08:28 PM
Ad island
by TGCsanderson. 11/25/17 06:41 PM
Taking to long to connect to DB
by AstroCat. 11/24/17 12:34 PM
Forum Statistics
Forums36
Topics35,015
Posts190,538
Members12,045
Most Online978
Jun 24th, 2007
Random Image
Powered by UBB.threads™ PHP Forum Software 7.6.1
(Snapshot build 20171106)