Hello, I was just wondering if anyone knows if javascript in a post inside would be saved to the dev-forum database and filtered removed when queried by a user.
or does is just get removed before getting saved to the database?
Ty!
Odds are Discourse properly handles HTML in threads and replies, especially since it’s open source forum software used by many people.
I’ve written a script inside this reply, however it doesn’t run, it doesn’t display, but it’s still accessible when I edit my post. The text is saved, but it doesn’t do anything.
1 Like
Ty, I’m new to these forums and didn’t notice the edit button. Now I see that it is indeed saved, ty!
Please use Inception Forum for posts about the forum itself.
<script> tags are saved but not functional anywhere on the forum to prevent XSS.
1 Like