Home/ Questions/Q 1050239
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-16T16:44:27+00:00

I may need to implement this sometime in the future, but I think the

  • 0

I may need to implement this sometime in the future, but I think the trigger for the question now is mainly curiosity.
I thought of how to write a text editor to a web site I’ll build soon, and saw this site’s (and other’s) way, so I thought – isn’t it a bit too complicated? If tags should be used from the first place, why not let users use HTML tags? The only reason I can think of is HTML injection which I don’t know much about, but it sounds like an easy issue to solve, isn’t it?

Thank you.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    Simply because not all of your users will know HTML. *bold text* is a lot more easy to understand (and read in it’s raw form) than <b>bold text</b>. Especially if you get into links.

    The reason we use Markdown, Textile and the rest is to provide a nice alternative that’s accessible to more users.

    Of course you can still provide the ability to use HTML to your users (it’s in the Markdown spec) but you’ll have to do a lot of checking to make sure there’s nothing malicious going on – for example, blocking <script>, <iframe>, large images, javascript in the form <a href="javascript:alert("...");"> etc.

    • 0