[FIXED] How to disable HTML in node description

[developr]

Hi,

it is a high security risk to allow HTML in forum description for group owners.

I tested it with the following code:

<meta http-equiv="refresh" content="3; URL=http://www.example.com/">

Of course you can insert Java-Script to fetch user imputs.

I will recommend to change html to bbcode for description.

 

[Truonglv]

Fixed. It's not allowed use any html tags now.