Flashtease converted is...weird !

Post all technical issues and questions here. We'll gladly help you wherever we can.
Post Reply
User avatar
Shattered
Experimentor
Experimentor
Posts: 1243
Joined: Fri Jan 11, 2013 6:41 pm
I am a: Switch
Location: United Kingdom

Flashtease converted is...weird !

Post by Shattered »

Look at Faux Choices!

https://milovana.com/webteases/showtease.php?id=39570 :lol:

This is beyond the first few pages so it seems unplayable. Anyone else run into this issue?
fapnip
Explorer At Heart
Explorer At Heart
Posts: 430
Joined: Mon Apr 06, 2020 1:54 pm

Re: Flashtease converted is...weird !

Post by fapnip »

Eos' html sanitizer only allows <br>, <b>, <i>, <u>, <strong>, <em>, <p> and <span> tags -- everything else is just encoded and displayed as text.

In some cases, the flash player allowed far more stuff to be injected than the Eos player, but also opened up XSS and privacy issues.

Wouldn't be perfect, but if seraph0x was willing to change Eos's sanitizing filter from:

Code: Select all

whiteList: {
      br: [],
      b: [],
      i: [],
      u: [],
      strong: [],
      em: [],
      p: ['style'],
      span: ['class', 'style']
    },
To something like:

Code: Select all

whiteList: {
      br: [],
      b: [],
      i: [],
      u: [],
      strong: [],
      em: [],
      p: ['style'],
      span: ['class', 'style'],
      textformat: [],
      font: ['color'],
    },
It would probably help teases that are using ancient markup like that render a little bit better.
Post Reply

Who is online

Users browsing this forum: No registered users and 3 guests