# User styled posts?

**URL:** <https://meta.discourse.org/t/user-styled-posts/89632>\
**Category:** Product Support\
**Created:** [June 11, 2018, 7:07pm UTC](https://meta.discourse.org/t/user-styled-posts/89632 "2018-06-11T19:07:09Z")\
**Posts on this page:** 1\
**Showing post:** 14

<div class="post-metadata">

**Author:** ![Kat\_F](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/kat_f/32/161990_2.png) [@Kat\_F](https://meta.discourse.org/u/Kat_F)\
**Post date:** [September 28, 2019, 4:37pm UTC](https://meta.discourse.org/t/user-styled-posts/89632/14 "2019-09-28T16:37:49Z")

</div>

OK.

The code for clickjacking was discovered by a user and passed on to me.  
I’m not a coder. All I know about the connection was what I was told, specifically:

> please note this is specific to the bbcode and bbcode-color plugins, so it isn’t an issue that affects all Discourse sites. Thanks for bringing it to our attention, we’ll certainly get it fixed.

I’ll send the info via PM as I don’t want to just drop possibly malicious code in public.

---

_[View the full topic](https://meta.discourse.org/t/user-styled-posts/89632)._
