In the past, I haven’t allowed HTML in comments, because Sanitize doesn’t strip javascript:-protocol links from URLs – but I’ve changed my mind, and am going to allow HTML in the posts. The change also means that URLs are no longer automatically linked.

Previous Post
Leave a comment


  1. Why did you turn off auto-linking of URLs when you started allowing HTML in comments? The lack of auto-linking of URLs is one of my bigger gripes with Slashdot, btw. (Makes karma whoring easy, though, since everyone else forgets to hyperlink URLs manually :P)

  2. I turned it off, because auto-linking with Textile formatting is broken. The “textile”: way of writing links is much nicer anyhow.