Consideration comments not being HTMLescape'd

The "node status" nodelet for A copyeditor needs help to get started with a Perl project contains

Considered: [PodMaster] EDIT - add some

s for readability
[download]

I gather PodMaster actually wrote "add some <P>s for..." but it wasn't HTMLescape'd.
This opens up the possibilty of anyone with enough XP to consider a node being able to add javascript, etc to almost any node, which up until now had only been a problem on homenodes.
Can this be fixed?

Comment on Consideration comments not being HTMLescape'd Download Code

Replies are listed 'Best First'.
Re: Consideration comments not being HTMLescape'd by Joost (Canon) on Nov 04, 2004 at 09:44 UTC
Note that this site supports its own markup language, which only looks like HTML - <script>alert('Yes it does');</script> doesn't work in comments, but `<p>` does. AFAIK this is also the case for the consideration remark. "What should it profit a man, if he should win a flame war, yet lose his cool?"	[reply] [d/l]
Re^2: Consideration comments not being HTMLescape'd by skx (Parson) on Nov 04, 2004 at 17:07 UTC
Although it is worth noting that javascript is allowed/enabled upon the home nodes of monks. My home node, for example, has a javascript link in it. This has been raised before I mentioned it here Steve --- steve.org.uk	[reply]
Re^2: Consideration comments not being HTMLescape'd by fireartist (Chaplain) on Nov 04, 2004 at 10:58 UTC
That makes sense, thanks.	[reply]
Re: Consideration comments not being HTMLescape'd by theorbtwo (Prior) on Nov 04, 2004 at 17:16 UTC
Until just a moment ago, this was the case -- we weren't properly escaping or filtering the consideration reasons when displayed in nodelets. They are now properly filtered -- using the same filter that's used for the chatterbox. (This means that you can use some tags as formatting, and bracket-links will show up as such.) Warning: Unless otherwise stated, code is untested. Do not use without understanding. Code is posted in the hopes it is useful, but without warranty. All copyrights are relinquished into the public domain unless otherwise stated. I am not an angel. I am capable of error, and err on a fairly regular basis. If I made a mistake, please let me know (such as by replying to this node).	[reply]