VaultWiki [Paid] 4.1.7 Patch Level 1

[silence]

There is a conflict with an add-on you have called "GreenText." It looks like it is designed to double-encode HTML in various situations (once in the parent, then again in itself); I don't really understand that. I have modified the execution order of VaultWiki so that VaultWiki occurs later in the chain and can have the final say on what gets encoded.

Alright thank you!!!

And that's my addon so I'll have to fix it!

 

[silence]

I can't find a logical reason why Firefox is doing this. It might be a bug in Gecko. But you can work-around it for recent versions of Firefox by editing the template "vw_popup.css". At the end of the template, add this:

@supports (display: flex) {
    .vw-popuproot .vw-popupctrl {
        display: inline-flex;
    }
}

The issue also occurs in categories.

Also I disabled green text addon, but colored text is not being rendered correctly on my page. I cleared the cache and after the first refresh it displays like this:

#ffffff">testtest

 

[pegasus]

Do you have any add-ons that look for hashtags (#)? It might be finding #ffffff and trying to use it as a tag.

 

[silence]

Do you have any add-ons that look for hashtags (#)? It might be finding #ffffff and trying to use it as a tag.

Yeah I'm using https://xenforo.com/community/resources/hashtagging.2110/

 

[pegasus]

I would argue it's a bug in hashtagging if it tags things that are inside HTML tags (i.e. between < and the closing >) and that it bothers to tag hexadecimal color codes (#000000 through #ffffff, including shortcodes #000 - #fff). Having exploding HTML like this can potentially open XSS vulnerabilities in some browsers.

While sending raw HTML through the parser is not something XenForo does by default, VaultWiki is not the only add-on that does it either. It would be safer for hashtagging to be more careful about what it tags.

 

[silence]

I would argue it's a bug in hashtagging if it tags things that are inside HTML tags (i.e. between < and the closing >) and that it bothers to tag hexadecimal color codes (#000000 through #ffffff, including shortcodes #000 - #fff). Having exploding HTML like this can potentially open XSS vulnerabilities in some browsers.

While sending raw HTML through the parser is not something XenForo does by default, VaultWiki is not the only add-on that does it either. It would be safer for hashtagging to be more careful about what it tags.

It doesn't happen in posts though, and IDK if the author is still making changes to it haha.

 

[pegasus]

We could probably skip running the cache through the parser again. I think it's done for autolinks, but it can be done at another level.

Even so, hashtagging would still need to update so that it ignores HTML and hex, because of the security issues. The only way to prevent this in VaultWiki right now without disabling hashtagging is to disable VaultWiki's cache: Home > Settings > VaultWiki: Site Config > Wiki Parser Cache Lifespan = 0.

 

[silence]

We could probably skip running the cache through the parser again. I think it's done for autolinks, but it can be done at another level.

Even so, hashtagging would still need to update so that it ignores HTML and hex, because of the security issues.

Alright!

 

[silence]

I set the bbcodes for the custom ones to be hidden on normal messages, however, they disappeared from the editor, but there is a gap that is visible.
With VaultWiki enabled:

With VaultWiki disabled:


Can this be fixed?

 

[pegasus]

I set the bbcodes for the custom ones to be hidden on normal messages, however, they disappeared from the editor, but there is a gap that is visible.

Can this be fixed?

Did you try this already? https://xenforo.com/community/threads/vaultwiki-paid.52485/page-23#post-990009

 

[silence]

Did you try this already? https://xenforo.com/community/threads/vaultwiki-paid.52485/page-23#post-990009

Alright just did it, the buttons didn't show up immediately, I had to refresh one of the custom BBCodes for them to all show up in the wiki editor.

 

[pegasus]

By any chance did you disable "Place BB-Code in the Wiki Code group?" for the wiki BB-Codes?

If it's a wiki BB-Code with a wiki-supplied icon, then this needs to be turned on.
If you disable this, then the wiki image directory will not be automatically used for the icons and you will have to set a different path or the full image path for the icon.

EDIT: I see you got it working.

 

[AlexL777]

Hello Community and Developers,

I was about to buy this Wiki Addon and had to register on the VaultWiki page. But that did not work quite as I wanted to go to the checkout.

I was shown this error:

Oops!
Could not find phrase 'arsenal_invalid_gateway'.

Can someone help me there or here announces itself also the addon developers? Would be super nice and the VaultWiki I want Thanks in advance.

 

[AlexL777]

Hello again,

everything has cleared up and I was able to download VaultWiki from the members area on the page with Vaultwiki and was able to install it successfully. Now I need to gain more experience

 

[silence]

Can you disable the wiki contribution count in the member card/profile?

 

[AlexL777]

Can you disable the wiki contribution count in the member card/profile?

Do you mean me directly? Why do I disable it?

 

[JulianD]

Hello,

I was wondering if the admin can have the option to approve all the changes made to the wikis before being public?

 

[Alpha1]

Yes, thats possible. There is a moderation queue.

 

[pegasus]

I don't believe you can hide the profile counts, not without editing the VW_profile templates to hide it. I suppose we can add a user group permission for this, so you can show profile contributions for certain groups only, such as if you have a Wiki Editor group.

 

[Xyphien]

How do you remove the Wiki Statistics in the Forum Statistics of the Sidebar?