riddla wrote:Here's the list of completely safe HTML tags I have allowed on my phpbb boards:
b,i,u,p,pre,blockquote,br,strong,ul,ol,li,H1,H2,H3,H4,tt
"completely safe" is a bit of a overconfidant place to be.
by the way, i would heavily suggest rewriting the "allowed html" checking code, it's shitty with stock ubb (for example, you can't do <tag attribute="value">, it'll be blocked/disallowed -- only straight <tag> works. this means no <bgsound src="">/<iframe src="">/<img src=""> stuff if you wanted it)