Hi all,
I’ve just seen Leira’s profile (https://online-go.com/player/27056/) and I was wondering how to add this “other servers” section with the (apparently) up-to-date graphs.
Has anyone an idea ?
Thanks
Yes! The info page supports html, so there’s some code there that you’re not seeing. You can call up an image from an internet source like this:
< img src=“https://www.gokgs.com/servlet/graph/Crazywind-en_US.png”/ >
If you close the spaces around the < > , it looks like this:
I hope that helps.
4 Likes
Yes, thank you, that’s exactly what I was looking for.
By the way, it’s weird to support html there, I was taught some skilled hackers could hack the website because of this…
Not with html alone. As long as anoek has been careful to not allow scripting or auto-redirects it should be fine… goes to test lol
edit: confirmed scripts don’t get parsed
1 Like
I’m not an expert, all I remember is “don’t allow users to write html” ^^
1 Like
those two comments go perfectly together. The less you know, the less you allow your users to do 
It seems anoek knows enough to allow html but not all tags
2 Likes
The img tag allows for Cross-site request forgery
1 Like
@anoek might want to read this link from flovo regarding image tag vulnerabilities
1 Like