Apparently there used to be a topic here at meta where it would help guide you how to inject scripts but it has been removed. At first I did not know that markdown would strip id and classes from posts in html and right after that I found out scripts have to be executed differently. I am trying to…

I don’t understand this request. You want average users to be able to inject arbitrary Javascript in your Discourse, by simply posting it in a reply? This would be a security nightmare.

Thanks for the quick reply Jeff. The average user will not be adding the external scripts, only providing divs with data attributes that will be whitelisted to trigger the JS external scripts to fill in the content when those divs are found. Aren’t divs with attributes (basic HTML) already support…

So you don’t want JS, you want <div attribute='blah'> I’ll edit your topic title so it is more reflective of what you’re actually asking. I’m not sure if we allow arbitrary whitelisting of individual HTML attributes. You could whitelist <iframe> domains in your site settings to achieve something …

[صورة] lcestou: wowhead If you search “wowhead” in Meta search you will find: [صورة] Hover preview and quote of the day Support Close, we did it for HearthStone and Artifact as a proofs of concept: https://github.com/xfalcox/discourse-artifact/ h…

Thanks Jeff, I have been able to whitelist iframes in the past but is not the behavior that I’m looking for. Hola Rafael, I guess I’m bad at explaining. There is an example on this post: [صورة] Blood Mallet Script Site Feedback …

This is exactly what @Falco linked you, read GitHub - xfalcox/discourse-hearthstone · GitHub it has everything you need.

Hello Joffrey, Ok thanks. I did tried to read and understand some of the code, will see how far I can get. Thanks again.

I just realised I never wrote about this, but Generic bbcode wrapper for theme components could be very helpful for your use case.

توجيهات حول إضافة سمات HTML عشوائية إلى القائمة البيضاء؟

الدعم

j.jaffeux (Joffrey Jaffeux) 20 يوليو 2019، 8:51ص 7

هذا بالضبط ما رافقه @Falco، اقرأ GitHub - xfalcox/discourse-hearthstone · GitHub فهو يحتوي على كل ما تحتاجه.

الموضوع		الردود	مرات العرض
Whitelist all the code inside of a div tag? Support	9	2670	12 أكتوبر 2016
Allowing additional HTML elements Support	1	610	14 سبتمبر 2021
Whitelisting HTML tags / attributes Support	2	1988	3 أغسطس 2020
Post HTML Element Class Being Removed Support	9	2748	3 نوفمبر 2018
What are the different ways to customize content inside a post (custom attributes and such) Support	8	2823	17 مايو 2022

توجيهات حول إضافة سمات HTML عشوائية إلى القائمة البيضاء؟

الموضوعات ذات الصلة