You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
As of now, the vetting type hints are saved as plain text. The RA could write markdown, bbcode, html in the textarea. But on the self-service side this text is escaped and certainly not rendered.
We do want to allow some rudimentary formatting of the text. During development a spyke with a wysiwyg editor was created. Leaving a very fancy result. But opening new concerns as to what HTML would be stored in the database, and how well this input was filtered, formatted. Having such an editor in place opens up a host of new attack vectors. Caution must be taken.
A much simpler, and slightly less user friendly option might be better: allow a certain set of BBcode, or Markdown format elements to be in the text. And render them on the SelfService side.
To be determined:
What 'formatting markup language' would be preferable?
Which formatting options do we allow for? [strong|italic|underline|link]?
Are lists something we want to facilitate?
Do we want to give users of RA a nice formatting experience? By providing an editor of sorts? This makes things slightly harder as the integration of industry standard editors is usually not yet implemented into Symfony bundles. We can do this ourselves, but this makes for a lot of work..
The text was updated successfully, but these errors were encountered:
This issue is imported from pivotal - Originaly created at Jul 28, 2022 by Michiel Kodde
We do want to allow some rudimentary formatting of the text. During development a spyke with a wysiwyg editor was created. Leaving a very fancy result. But opening new concerns as to what HTML would be stored in the database, and how well this input was filtered, formatted. Having such an editor in place opens up a host of new attack vectors. Caution must be taken.
A much simpler, and slightly less user friendly option might be better: allow a certain set of BBcode, or Markdown format elements to be in the text. And render them on the SelfService side.
To be determined:
The text was updated successfully, but these errors were encountered: