Roll20 uses cookies to improve your experience on our site. Cookies enable you to enjoy certain features, social sharing functionality, and tailor message and display ads to your interests on our site and others. They also help us understand how our site is being used. By continuing to use our site, you consent to our use of cookies. Update your cookie preferences .
×
Create a free account

Tables nerfed in sheets

1337000446
claytonian
KS Backer
Translator
Until recently, I had tables (in the word processor sense of the word) in my character sheets etc. They kept their original formatting and looked good. Tonight when we signed in, the tables had been reduced to a mess of text. Can we get tables back? Simple HTML coding would be nice too. Links, for instance.
The reason the HTML went away is due to XSS vulnerability concerns. I will re-enable tables during the next update...just keep in mind you can't use any style tags or properties on the tags. We'll see how it goes, but as long as they don't present any XSS vulnerabilities that I haven't thought of, it should be okay. The reason "a" tags aren't in right now is because it would make for a bad user experience if someone forgot to put "_target='blank'" -- it basically kicks you out of the game. Anything that's a link should get auto-linkified, though, so it's clickable. What we'll probably move towards in the future is some sort of combination of basic HTML tags and Markdown.
1337004502
Deightine
KS Backer
Sheet Author
Could always fall back on BB code to keep it relatively close to HTML for sanity's sake and then only accept the codes you decide to include, parsing them out when the field is saved, then converting it back when the field is edited. Just make it nullify completely to avoid any chance of injection.
This is why you get into game development... so that someone makes a forum thread about you nerfing something. THIS IS THE BEST DAY.
1337006433
Ezra
KS Backer
/ragequit
1337007528
Abd al Rahman
KS Backer
Sheet Author
API Scripter
Can I get your stuff?
I had my character possession lists as Word tables. Copied and pasted them. Re-opened them to assign them to players. Table formatting gone. Laboriously re-formatted them as plain text using Roll20's tools. … Could simply have waited 24 hours and re-pasted.