Markdown or HTML -

-

I need users to create, modify and delete my articles. I am planning to use the WMD editor which uses to create articles

What I can collect, stores Markdown and HTML. Why does it do this - what is the benefit?

I can not decide whether to store Markdown, HTML or both. If I store both, then I will recover a user for display.

UPDATE:

OK, I think by far the answers, I like Markdown and HTML. I'm also reading a blog post about XSS exploitation from Jeff Because the WMD editor allows you to input any HTML so that I can have some headaches.

There is a blog post in question I'm guessing that I have to follow the same SE approach - and clean the input on the server side

whether the sensitization code o open source Is available in the form or do I have to start it from scratch?

Any help would be greatly appreciated.

Thanks

In terms of performance and compatibility (and ultimately social control) Both are extremely useful / helpful.

If you store only markdown (or whatever non-HTML markup), it is always worth paying attention to all the time by parsing it in HTML tastes. Not worth the cheap

If you store only the HTML, then you will live quietly in the HTML generated from the risk. This can cause many maintenance and bug fixing headaches. You will also lose social control because you no longer know what the actually is filled with the user. For example, you know as an administrator who users are trying to use XSS & lt; Script & gt; And so on, End User will not be able to edit data in Markdown format. You have to change it back to HTML.

To update the HTML on every change of MarkDod version, you can represent the Markdown version by adding an additional field which is being used to generate HTML output. Whenever it has been changed to Server Side, at this time you retrieve the row, using the new version, you can re-parser the data and update the line in DB. This is an additional cost only once.


Comments

Post a Comment

Popular posts from this blog

c# - sqlDecimal to decimal clr stored procedure Unable to cast object of type 'System.Data.SqlTypes.SqlDecimal' to type 'System.IConvertible' -

-
I'm new to this I'm writing a clr. stored procedure that can be used to get values ​​used in a calculation Call for another stored procedure for Gives an archived methodology int (I think SqlInt32? Value of the table's value is int) which is then necessary to convert to decimal. Here I have the code: Public static integral mood (SQL MDMMYLUE, escalistering AMY type, out of SQLDCM Result) {aResult = 0; Try {SqlConnection conn = New SqlConnection ("Reference Connection = True"); SqlCommand cmd = New SqlCommand ("sp_GetType", conn); Cmd.Parameters.AddWithValue ("@ myValueType", aMyValueType); Cmd.CommandType = CommandType.StoredProcedure; Conn.Open (); Object type = CMD. Exclamation Asser (); Conn.Close (); Decimal type FORCalculation = Convert. ToDecimal (type); Decimal value = convert toDecimal (aMyValue); // ** calculation calc = new calculation (); Decimal result = calorie.docalulation (typefarculation, value); I get an exception...
Read more

Calling GetGUIThreadInfo from Outlook VBA -

-
I need to find the active window'm writing a VBA macro in MS Outlook, which is a specific process. The goal of this is to get the active window / document name even if its original application has more than one document interface. User processor with GetCurrentThreadId is active, I am using GetGUIThreadInfo to get .dll. Here is the correct code: private type RECT as as Left LongPtr top LongPtr right LongPtr down LongPtr termination of private type GUITHREADINFO cbSize as LongPtr flags LongPtr hwndActive LongPtr hwndFocus LongPtr hwndCapture LongPtr as as as as as reset as LongPtr rcCaret as LongPtr hwndCreate as LongPtr hwndMoveSize as HwndMenuOwner end of Private Equity PtrSafe function GetWindowThreadProcessId Lib "user32" (_BVV hnw LongPtr as LongPtr Nig Mr. announced as PtrSafe function GetGUIThreadInfo Lib "user32" _ (ByVal dwthreadid as LongPtr, _ lpguithreadinfo as GUITHREADINFO) LongPtr Sub MyFunction () as dim strWindowTitle string = space as s...
Read more

Obfuscating Python code? -

-
I'm looking for a way to hide my Python source code. print "Hello World!" How can I encode this example so that it is not human-readable? I have been asked to use Base 64 but I'm not sure how. itemprop = "text"> It is limited only, first level ambiguous resolution, but has built-in: byte-code in Python Is a compiler for: dragon-o-m py_compile & lt; Your program.py & gt; creates a .pyo file with a byte-code, and where the docstrings are removed, etc. You can rename .pyo with the .py extension, and python & lt; Your program.py & gt; runs as your program, but it does not have your source code. PS : If your program blur modules like this, you need to rename them with the .pyc suffix (I Not sure it will not break a day), or you can work with .pyo and run them with python -o ... .pyo ( Import should work). This will allow dragon to search your modules (otherwise, Python looks for the .py module).
Read more