Allow specific BB code options to be disabled / modified

donald2

New member
I dont want to setup an image proxy so my users dont get ip-grabbed via [IMG(])https://malicious_site_yada.com([)/IMG] otherwise i will end up leaking my backends ip which sits nicely behind cloudflare, i havent found any up-to-date addons to solve this issue. You can even make users who visit profiles with such bb code on it type in ur shoutbox if you're using that addon too.

I know you can limit media to certain links but why not images aswell, its tiresome to try and fix this problem, I've tried everything including censorship which doesnt work because bb code is priortized, and i ended up bricking my forum using the only addon i found which might work, though I should've not ran it since it said it was unmaintained, anyhow after 3 hours we're up and running again using the importer i just had to mostly fix themes.

Im sure many other would like the option to customize bb codes more :)
 
Upvote 0
If you just want to disable [IMG] BBCodes create a new BBCode with that name, I think from memory it throws an error, but creates it anyway (at least in 2.2) and then you can just edit the 'new' tag and define what you want it to spit out instead of the img tags. I do that with size and colour tags on some of our forums where users otherwise get "carried away" with their creativity...

Otherwise there might be some milage in using the image proxy, but via a different server for doing the final proxying using $config['http']['proxy'] in your config - there are a few posts on this forum about that. In a similar vein and since you already use cloudflare you can use their workers to fetch the images - see App for Cloudflare.

EDIT - as an aside I would love to be able to control who can use a specific BBCode, that would be such a useful ability in XF.
 
Last edited:
Back
Top Bottom