No delete button for comments

[RTLShadow]

I wrote some test comments in the Lulzbot Begonia page and now I can't delete them. perhaps that's something we need.

[traverseda]

Yeah, and an edit button. I'm not too familiar with that subsystem. It also needs a decent limited markdown, like reddit comments.

[RTLShadow]

Yeah, are you sanitizing your inputs and such to avoid injections?

[traverseda]

Sanitizing the output mostly. It's part of the django templating system. I'm very careful if I'm ever pushing raw html to be included inline in a template. Like the readme files.

There's been at least two separated users created to try and run XSS attacks.

There's no point where we're dealing with "raw" input, it's all python unicode being used with an sqlalchemy style api, so there's not risk there.

[RTLShadow]

Alrighty. Definitely take a look and see how hard it would be to implement markdown in the comments and readme.md.

[traverseda]

It's already in readme.md, just not the comments

[traverseda]

Looks like it wouldn't be too hard. But prioritization. I'm going to work on getting the CDN properly sorted out, and on the multiuploader page.

[traverseda]

Fucking full time employment and it's time usage.