Can fake HTML to bypass character limits be patched?

[urias (Hugoonreplit)]

Hey people,

on another web that uses Discourse I mentioned users putting a little amount of text in a topic, @not-ethan mention that if the user puts <charectersssssssssssssssssss> this will create a blank space. This is very annoying and can be used to spam topics with nothing in the description, could this be patched, all credits to @not-ethan!

[Moin]

Bypassing character minimum on posts via HTML

Yes, this is well known, there are many topics on this. Have a search. It’s WONTFIX because there are as many methods to bypass as there are grains of sand on a beach. We only care about the common and easy ones.

[not-ethan (Ethan)]

I feel like this has been brought up before here. And I know it has been brought up the Robox Dev Forum thought I cant find the report.

This would also require a lot of work.

@codinghorror

HTML

Markdown specifies that it works seamlessly with HTML, so we do.

However, we only support a “safe” subset of HTML. I’ll have to dig to find the specifics, but anything common you’d expect to work that isn’t crazy – like <script> – should work.

We haven’t seen this yet (except me I think when demonstrating it to others). If you see it please flag it as something else.