Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

As a RA user, I want to do some visual formatting on the vetting type hints #498

Open
phavekes opened this issue Dec 1, 2024 · 0 comments

Comments

@phavekes
Copy link
Member

phavekes commented Dec 1, 2024

This issue is imported from pivotal - Originaly created at Jul 28, 2022 by Michiel Kodde

As of now, the vetting type hints are saved as plain text. The RA could write markdown, bbcode, html in the textarea. But on the self-service side this text is escaped and certainly not rendered.

We do want to allow some rudimentary formatting of the text. During development a spyke with a wysiwyg editor was created. Leaving a very fancy result. But opening new concerns as to what HTML would be stored in the database, and how well this input was filtered, formatted. Having such an editor in place opens up a host of new attack vectors. Caution must be taken.

A much simpler, and slightly less user friendly option might be better: allow a certain set of BBcode, or Markdown format elements to be in the text. And render them on the SelfService side.

To be determined:

  • What 'formatting markup language' would be preferable?
  • Which formatting options do we allow for? [strong|italic|underline|link]?
  • Are lists something we want to facilitate?
  • Do we want to give users of RA a nice formatting experience? By providing an editor of sorts? This makes things slightly harder as the integration of industry standard editors is usually not yet implemented into Symfony bundles. We can do this ourselves, but this makes for a lot of work..
@phavekes phavekes self-assigned this Dec 1, 2024
@phavekes phavekes added this to Stepup Dec 1, 2024
@github-project-automation github-project-automation bot moved this to New in Stepup Dec 1, 2024
@phavekes phavekes removed their assignment Dec 1, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
Status: New
Development

No branches or pull requests

1 participant