Thread

EE 2.1, Build 20100810
Discussion Forum - version 3.1.0 (20100805)

I must be missing something.

Although I’ve set a forum’s “HTML Formatting in Posts” preference to “Allow all HTML (not recommended)”, when YouTube’s embed code is posted, EE converts the < and > brackets to character entities and therefore the video player posting fails.

Is there another setting I need to review to allow users to embed video in their forum posts?

Tripp, there was an add-on for EE1.x that allowed this. You might want to contact the author to see if he/she is planning on updating it for EE2.x. They should be listed on Devot-ee.

I believe you’re talking about VideoPlug Forum Extension. The author updated his web site in January 2010 stating that he had plans to update it for EE2.

That said, I’m trying to understand why “Allow all HTML (not recommended)” does not in fact allow all HTML.

Is it correct to say that EE’s forum module, in it’s current form, will not allow my users to use HTML to embed a YouTube video despite the preferences?

Secondly, where can I find documentation that defines “all HTML” for the forum preferences? I couldn’t find that information in the Forum Module docs.

That said, I’m trying to understand why “Allow all HTML (not recommended)” does not in fact allow all HTML.

Because some potentially dangerous tags (script, embed, ...) are still filtered for security reasons.

Yes, I understand that there are security concerns. One would think that a label marked “allow all (not recommended)” would offer an administrator the ability to bypass all filters for specific use cases though.

Thanks for the info. I’ll look into getting a custom plug-in written.

This thread can be closed.

Yes, I understand that there are security concerns. One would think that a label marked “allow all (not recommended)” would offer an administrator the ability to bypass all filters for specific use cases though.

“All HTML” here is opposed to “Safe HTML” which only allows

<b>, <i>, <em>, <del>, <ins>, <strong>, <pre>, <code>, <blockquote>, <h2>, <h3>, <h4>, <h5>, <h6>

.

Thanks for the info. I’ll look into getting a custom plug-in written.

Very good. Closing as per request.

Really 😊