[RFC] Multiple Editors and Parsers

Note: We are moving the topics of this forum and it will be deleted at some point

Publish your own request for comments/change or patches for the next version of phpBB. Discuss the contributions and proposals of others. Upcoming releases are 3.2/Rhea and 3.3.
Post Reply
User avatar
Highway of Life
Registered User
Posts: 1399
Joined: Tue Feb 08, 2005 10:18 pm
Location: I'd love to change the World, but they won't give me the Source Code
Contact:

[RFC] Multiple Editors and Parsers

Post by Highway of Life » Sun Feb 14, 2010 10:31 am

This is an RFC on allowing editors besides BBCode within phpBB4.

I’ve created the wiki page for the RFC here: http://wiki.phpbb.com/PhpBB4/RFC/Multiple_Editors

The current parser used within phpBB3 is a BBCode parser that allows for custom BBCodes, but just as an administrator using phpBB2 was able to add an HTML tag that made the board vulnerable to XSS, you can do the same with the BBCode parser, so are we really any more secure using BBCode than we are with HTML?

Many Web-Applications include at least basic HTML support out of the box. MediaWiki, WordPress (pages, posts and comments), vB. - when both whitelisted and filtered properly, I believe you can have a secure HTML parser, or at least as secure as the BBCode processor. But the real reason I believe users commonly ask for HTML support is that they want more familiarity and flexibility in formatting for posts.

However, what if phpBB4 actually enabled users to choose the markup format they wish to use in the post they are making. A list of options could be given to them when making a post, or set in the user preferences for the default editor preference:
  1. Plain Text
  2. BBCode - What’s phpBB without BBCode?
  3. Markdown - Would need to be modified, includes some HTML support.
  4. Textile - Would need to be modified, includes some HTMl support.
  5. WYSIWYG - Popular GPL options include: (F)CKEditor with jQuery, and TinyMCE.
  6. rawHTML - A whitelist only parser.
With perhaps a combination of parsing options. For example: enable/disable of the BBCode parser, so you could use a combination of editors, or keep things simpler with a drop-down option of which editor to choose from.
This would enable users to use the editor that is most familiar to them and enabling them to create content faster and easier while improving the user experience.

Each editor option could be loaded in as a plugin and would have the option of being enabled or disabled by the administrator. Third party developers could create a LaTeX editor plugin for example.

Markdown reference:
http://daringfireball.net/projects/markdown/basics/

Textile reference:
http://hobix.github.com/hobix/textile/
Image

User avatar
EXreaction
Registered User
Posts: 1555
Joined: Sat Sep 10, 2005 2:15 am

Re: [RFC] Multiple Editors and Parsers

Post by EXreaction » Sun Feb 14, 2010 5:21 pm

Why only use one parser at a time? Some stuff is easier in bbcode and some stuff may be limited compared to other parsers.

Post Reply