Development Discussion Board

For future reference, starting with 1.3 the Emoji plugin provides an easier way to use Twemoji assets from their CDN using the @tseq attributes. phpBB currently ships with the 0.13.1 version and there's been a few backward-incompatible changes between 0.x and 1.x but only one of them directly ...

If you let someone upload a SVG, it becomes possible for someone to link to it and then it becomes possible to execute scripts. Same as letting users upload a HTML file.

I am not an expert on .svg format, but some quick searching has taught me that .svg files may contain scripts and are thus a potential security hole.


Scripts are not executed by the browser if the resource is fetched as an image. In order to execute scripts you need to link to the SVG image ...

eval usage should be avoided, no ?


In practice it goes like this:


A: eval() should be avoided()
B: Why?
A: Because it's bad.
B: Why?
A: It's not safe.
B: Why?
A: It can be used to <whatever>
B: How?
A: I don't know.


If you're interested, here's what you should do: find out how eval() is ...

If the user used the actual emoji character or sequence then yes, you have the original character available if you want to process it at display time somehow. If they used an ASCII name such as :rainbow_flag: it gets dicier, considering there's no standard for them. Either way, the only values ...

Each emoji set uses a different filename scheme, which makes it much harder to switch from a one to another unless you maintain your own fork.


EmojiOne: 1f3f3-1f308.png
Twemoji: 1f3f3-fe0f-200d-1f308.svg
Noto: emoji_u1f3f3_200d_1f308.svg


Currently, the value that's stored in the post's ...

On the topic of emoji, I noticed today that GitHub have recently replaced their emoji with Noto's. GitHub's PNG is on the left, Noto's SVG on the right:

Let me put it this way:

1. Replace IRC with Discord
2. ???
3. Greater engagement

What happens in phase 2 that leads to phase 3?

Can you provide a practical example of something that would be made possible by using Discord instead of IRC + forums?

Having consistent emoji is very expensive in development and maintenance. Here are some of the reasons.

First off, every operating system, device or browser has its own way to display emoji. It can be as a nice color image, a slightly less nice black-and-white image, or even not an image at all ...