This is just how IPBoard works, there's no security issues present as it takes the HTML elements from your reply and basically strips it of everything but whitelisted attributes (as determined by Invision Power). Also, there was no custom CSS in your reply, just a element style with height and width - these are used by embedded images for example.Edit because last reply got really broken,
Cheers for your reply.
- This issue only seems to happen on RPUK, although it's my plugin creating the problem by the looks, it really shouldn't be causing any problems.
- Surely a plugin has the ability to make custom CSS styled div's presents a security risk? If that's what you're proposing then it might be possible to do the same but with JS instead of CSS if somebody were to make a malicious plugin, might be worth looking into
I'll test it on my own IPB Dev and check, if the issue is as expected I'll report it to Invision.This is just how IPBoard works, there's no security issues present as it takes the HTML elements from your reply and basically strips it of everything but whitelisted attributes (as determined by the Invision Power). Also, there was no custom CSS in your reply, just a element style with height and width - these are used by embedded images for example.
If anyone abuses how IPBoard works to intentionally cause things similar to how your posts ended up, they can be dealt with by staff under 15.1 / whatever other relevant rule.
We use essential cookies to make this site work, and optional cookies to enhance your experience.