Re: [Social-mediagoblin] description / comments markup type

[Christopher Allan Webber]

Okay, so yes, we'll go with Markdown then.

I think we can support multiple markup types (and even just plain but
sanitized html) later.  The main thing anyway is that when we federate
between instances we'll probably be getting the rendered html of
descriptions, comments, etc of external works, so we'll still need to
have an html sanitizing setup available to avoid cross site scripting
attacks.


Joar Wandborg <address@hidden> writes:

> I'll put in my vote for markdown, it's easier to "get right" for the average 
> user than HTML
>
> - IMO
>
> On Mon, May 23, 2011 at 15:39, Aaron Williamson <address@hidden> wrote:
>
>     On 05/22/2011 11:00 AM, Christopher Allan Webber wrote:
>     > We're going to have to run things throuh lxml.html.clean once we add
>     > federation anyway to prevent XSS attacks.  Anyway, curious of what
>     > people would prefer.
>    
>     I'm 100% for markdown or a similar non-HTML solution. Scrubbing user HTML 
> is
>     notoriously tricky, so I'd like to depend on it as little as possible. 
> Also,
>     HTML markup typically requires more characters and looks uglier than
>     markdown-or-similar, which affects user experience IMOYMMVBRB.
>    
>     Aaron
>

-- 
http://dustycloud.org/