Display HTML "as HTML"
-
There is a readme HTML file in my project[^]. In the preview mode, only the raw HTML data is display. From my POV it would be really nice to have the option to display HTML and similar files as if they are displayed in a normal browser, in addition to view the raw data.
The scariest moment is always just before the Start - Stephen King
Die Frauen warten auf die Liebe, und die Männer warten auf die Frauen - Wolf Wondratschek -
There is a readme HTML file in my project[^]. In the preview mode, only the raw HTML data is display. From my POV it would be really nice to have the option to display HTML and similar files as if they are displayed in a normal browser, in addition to view the raw data.
The scariest moment is always just before the Start - Stephen King
Die Frauen warten auf die Liebe, und die Männer warten auf die Frauen - Wolf WondratschekThat would be interesting option, indeed, although we need to take security into consideration. Running unsoliticed HTML/JS from unauthorized third-party might end up in disaster. You certainly would not like your private data (like session cookie) being stolen while you're watching live HTML from some malicious user.
-
That would be interesting option, indeed, although we need to take security into consideration. Running unsoliticed HTML/JS from unauthorized third-party might end up in disaster. You certainly would not like your private data (like session cookie) being stolen while you're watching live HTML from some malicious user.
Kamil Burzynski wrote:
That would be interesting option, indeed, although we need to take security into consideration. Running unsoliticed HTML/JS from unauthorized third-party might end up in disaster.
I reckon that the article HTML editor [and the editor I write this message in, IIRC] do something like removing the potentionally malicious bits on submit, maybe you can reuse this functionality? Article content is pure HTML, too and yet it seems to be pretty up to date when it comes to security considerations. To clarify: I'm not talking about "pure" HTML, I just want to be able to view the HTML displayed as HTML, without any fancy-pants Javascript bits - Of course the preview will never be able to show 'fully functional' HTML pages, just displaying a HTML-formatted readme file which is static text should be good enough [As it was an article, from the formatting POV]
The scariest moment is always just before the Start - Stephen King
Die Frauen warten auf die Liebe, und die Männer warten auf die Frauen - Wolf Wondratschek -
Kamil Burzynski wrote:
That would be interesting option, indeed, although we need to take security into consideration. Running unsoliticed HTML/JS from unauthorized third-party might end up in disaster.
I reckon that the article HTML editor [and the editor I write this message in, IIRC] do something like removing the potentionally malicious bits on submit, maybe you can reuse this functionality? Article content is pure HTML, too and yet it seems to be pretty up to date when it comes to security considerations. To clarify: I'm not talking about "pure" HTML, I just want to be able to view the HTML displayed as HTML, without any fancy-pants Javascript bits - Of course the preview will never be able to show 'fully functional' HTML pages, just displaying a HTML-formatted readme file which is static text should be good enough [As it was an article, from the formatting POV]
The scariest moment is always just before the Start - Stephen King
Die Frauen warten auf die Liebe, und die Männer warten auf die Frauen - Wolf WondratschekYes, a secure display of HTML is certainly a solvable problem ;)