raxelo
Member
The following permissions:
b_client_use_bbcode_any
b_client_use_bbcode_url
b_client_use_bbcode_image
can be bypassed in 2 ways.
By creating channels with BB code descriptions.
By editing their channels with BB code in caps or alternating caps like this:
or
I guess the first way is intended but the second way shouldn't. The permission is only applying when the IMG tag is lowercase.
b_client_use_bbcode_any
b_client_use_bbcode_url
b_client_use_bbcode_image
can be bypassed in 2 ways.
By creating channels with BB code descriptions.
By editing their channels with BB code in caps or alternating caps like this:
[ImG]https://i.imgur.com/orhxxNn.jpg[/ImG]or
[IMG]https://i.imgur.com/orhxxNn.jpg[/IMG]I guess the first way is intended but the second way shouldn't. The permission is only applying when the IMG tag is lowercase.
