In the chatblock help page, just below the list of smileys, it is said that if I type 'http://www.somedomain.com' or 'www.somedomain.com', the texts will become links, but they don't.

The reason may be what you said in another issue:

The chatblock uses the Drupal function 'check_plain' to filter user input. This prevents malicious users from using the chatblock to post malicious JavaScript through something called an XSS attack.

Either the url filter should work (preferable), or the instruction in help page should be removed. Don't you think?

Comments

dwees’s picture

dwees commented

This is a bug and will be fixed shortly the next time I commit changes. The url filter code was present in the module, and works, but was being bypassed. Also noticed a bug where the filtering of the text wasn't being done at all for the messages, so thanks.

Dave

dwees’s picture

dwees commented

This is fixed in the new .dev releases (which should be available in 12 hours or so).

dwees’s picture

dwees commented
Assigned: Unassigned » dwees
Status: Active » Fixed
Anonymous’s picture

Anonymous (not verified) commented
Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for two weeks with no activity.