I just realized that I could insert <script>...</script> in NewBB forum posts (which have HTML enabled), this is possibly a bad thing(tm) IMO, cookie stealing, client side processing that we don't want Anonymous Posters (or any malicious user) to insert in our forums...

I would like let my user still use HTML, but restrict the tags to: tr, td, table, b, p, img, a, etc... and NOT <script>!)

Is this possible with 2.0.6 right now ? As someone been working on this feature yet ?

I could just leave BBcode but hell... I don't like it...

Thanks a bunch.

Ok, I tried this and at first sight it works, I can share whatever table I want, that was a simple hack, though, very effective for me now!

Anyone has found the caveats yet ? Is there any except the fact that this is not configurable via the XOOPS Admin interface ?