<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[Embed HTML as code blocks in comments]]></title><description><![CDATA[<p dir="auto">Can't embed HTML code with Markdowns code-block feature, see <code>http://daringfireball.net/projects/markdown/syntax#precode</code></p>
<p dir="auto">And HTML cannot be even postet if set in backticks!</p>
<p dir="auto">HTML element link is always removed. Seee this block (is not visible!?):</p>
<pre><code>&lt;link href="/apple-touch-icon.png" rel="apple-touch-icon-precomposed" type="image/png"&gt;
&lt;link href="/apple-touch-icon.png" rel="apple-touch-icon" type="image/png"&gt;
&lt;link href="/apple-touch-icon.png" rel="icon" type="image/png"&gt;
&lt;link href="/apple-touch-icon.png" rel="shortcut icon" type="image/png"&gt;
&lt;link href="/favicon.ico" rel="shortcut icon" type="image/x-icon"&gt;
</code></pre>
<p dir="auto">my posting was (see image):</p>
<hr />
<p dir="auto"><img src="http://ibin.co/1JsxWHF4WWXx" alt class=" img-responsive img-markdown" /></p>
<hr />
<p dir="auto">I have write the HTML as:</p>
<pre><code>&lt; link href="/apple-touch-icon.png" rel="apple-touch-icon-precomposed" type="image/png"&gt;
&lt; link href="/apple-touch-icon.png" rel="apple-touch-icon" type="image/png"&gt;
&lt; link href="/apple-touch-icon.png" rel="icon" type="image/png"&gt;
&lt; link href="/apple-touch-icon.png" rel="shortcut icon" type="image/png"&gt;
&lt; link href="/favicon.ico" rel="shortcut icon" type="image/x-icon"&gt;
</code></pre>
<p dir="auto">Your HTML filter is to rectricted!</p>
]]></description><link>https://forums.opera.com/topic/2191/embed-html-as-code-blocks-in-comments</link><generator>RSS for Node</generator><lastBuildDate>Fri, 13 Mar 2026 21:48:31 GMT</lastBuildDate><atom:link href="https://forums.opera.com/topic/2191.rss" rel="self" type="application/rss+xml"/><pubDate>Tue, 22 Apr 2014 10:23:36 GMT</pubDate><ttl>60</ttl><item><title><![CDATA[Reply to Embed HTML as code blocks in comments on Wed, 23 Apr 2014 07:17:01 GMT]]></title><description><![CDATA[<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="https://forums.opera.com/uid/2804">@ngamer01</a><br />
Did you understand my post? I wrote:</p>
<blockquote>
<p dir="auto">Can't embed HTML code with Markdowns code-block feature</p>
</blockquote>
<p dir="auto">The Markdown code-block feature escapes securly HTML.</p>
<blockquote>
<p dir="auto">HTML has to be restricted or these forums risk abuse from outside vectors</p>
</blockquote>
<p dir="auto">&lt; irony &gt; OMG! Yes, HTML is bad, bad unsecure Markup, not the browsers <img src="https://forums.opera.com/assets/plugins/nodebb-plugin-emoji/emoji/emoji-one/1f609.png?v=f58hvca1lju" class="not-responsive emoji emoji-emoji-one emoji--winking_face" title=";)" alt="😉" /> &lt; /irony &gt;</p>
<p dir="auto">Is <code>&amp;lt;script&amp;gt;alert(42)&amp;lt;/script&amp;gt;</code> a risk?<br />
No, because, this is not executable by browsers!</p>
<p dir="auto">Is <code>&amp;lt;link src=&amp;quot;bad.js&amp;quot;&amp;gt;alert(42)&amp;lt;/link&amp;gt;</code> unsecure?<br />
No, because, this is not executable by browsers!</p>
<p dir="auto">Do you think people will post ugly UTF-7 encoded for injection in browsers?</p>
<blockquote>
<p dir="auto">Hackers have a huge arsenal of XSS vectors</p>
</blockquote>
<p dir="auto">Yes, i know. As webdeveloper i know the secrets of XSS and XSRF <img src="https://forums.opera.com/assets/plugins/nodebb-plugin-emoji/emoji/emoji-one/1f642.png?v=f58hvca1lju" class="not-responsive emoji emoji-emoji-one emoji--slightly_smiling_face" title=":)" alt="🙂" /></p>
<blockquote>
<p dir="auto">if the HTML filter is eased up here, these forums will be at the mercy of 3rd parties that seek to do harm here</p>
</blockquote>
<p dir="auto">As a result, nobody can post correct examples for code here. One has to link to gists or pastebins from outside.</p>
<p dir="auto">Asking for problems with browser bugs will hadicap people, if they cant post the relevant code.</p>
<p dir="auto">OK, my fault, a support forum should not be a place for professional questions.<br />
Thanks a lot.</p>
]]></description><link>https://forums.opera.com/post/36078</link><guid isPermaLink="true">https://forums.opera.com/post/36078</guid><dc:creator><![CDATA[Deleted User]]></dc:creator><pubDate>Wed, 23 Apr 2014 07:17:01 GMT</pubDate></item><item><title><![CDATA[Reply to Embed HTML as code blocks in comments on Tue, 22 Apr 2014 20:23:49 GMT]]></title><description><![CDATA[<p dir="auto">HTML has to be restricted or these forums risk abuse from outside vectors.  Hackers have a huge arsenal of XSS vectors hidden within the depths of the HTML specification and if the HTML filter is eased up here, these forums will be at the mercy of 3rd parties that seek to do harm here.</p>
]]></description><link>https://forums.opera.com/post/35998</link><guid isPermaLink="true">https://forums.opera.com/post/35998</guid><dc:creator><![CDATA[ngamer01]]></dc:creator><pubDate>Tue, 22 Apr 2014 20:23:49 GMT</pubDate></item></channel></rss>