This document uses (almost) all BBCode tags supported by Drupal's BBCode module. You can cut and paste this document into a node to test Drupal's BBCode implementation or to perform some benchmarks.
- Normal text formatting
- Font colors
- Font sizes
- Font faces
- Text alignment
- Images
- URL's
- E-mail addresses
- Headings
- Level 1 Heading
- Acronyms and abbreviations
- Code blocks
- Quoting
- Lists
- Table tags
- Other tags
- Tag nesting
- Test multi-line tags:
- Cross site scripting (XSS) vulnerabilities
- Broken tags
Normal text formatting
Test bold / strong text
Test italic / emphasised text
Test underlined text
Test strikeout text
Test subscript text - H2O
Test superscript text - X3
Font colors
Test blue text
Test red text
Test green text
Test #eeff00 text
Font sizes
Test 1px - too small, normalized to 6px
Test 12px text
Test 24px text
Test 100px - too big, normalized to 48px
Font faces
Test Arial typeface text
Test Arial typeface text
Test Courier typeface text
Test Courier New typeface text
Test Impact typeface text
Test Helvetica typeface text
Test Times New Roman typeface text
Test Verdana typeface text
URL's
www.test-url.com
ftp.test-url.com
http://test-url.com/~user/,part,of,url
ftp://test-url.com:8080/
http://test-url.com/
Test URL
Anchor (bookmark you can link to):
URL Anchor
Some URL's within a sentence: http://url1.com; www.url2.com, (www.url3.com) and www.url4.com. And some more: ftp://url5.com/, (ftp.url6.com/) and ftp.url7.com.
Google link: BBCode
Wikipedia link: BBCode
Headings
Level 1 Heading
Level 2 Heading
Level 3 Heading
Level 4 Heading
Acronyms and abbreviations
Abbreviations:
API
CMS
WWW
1 inch
Acronyms:
SQL
GIF
radar
Normal code block:
x := y + z; y := a - b;
An
inline code block
Color highlighted PHP code block:
<?php
echo "Sample PHP code";
?>
Test notag:
These BBCode tags are [b]not[/b] converted to HTML!
[size=20]I'm happy[/size]
A simple quote:
This is a quoted message
Quote with source:
This is a quoted message
Nested quotes:
This is a quoted message
Alastair wrote:This is a nested quote
A normal list (circular bullets, same as list=c):
- x
- y
- z
List with discs (list=d):
- x
- y
- z
List with squares (list=s):
- x
- y
- z
Numeric list (list=1):
- x
- y
- z
Roman lowercase list (list=i):
- x
- y
- z
Roman uppercase list (list=I):
- x
- y
- z
Alfa lowercase list (list=a):
- x
- y
- z
Alfa uppercase list (list=A):
- x
- y
- z
A nested list:
- x
- x.1
- x.2
- y
- z
| row1col1 | row1col2 |
| row2col1 | row2col2 |
| Header1 | Header2 |
|---|---|
| row1col1 | row1col2 |
| row2col1 | row2col2 |
Test marquee:
Horizontal delimiter:
Force line break:
-->
<--
Force space:
--> <--
Tag nesting
large red text
again - large red test with different tag order
Cross site scripting (XSS) vulnerabilities
User-entered text with embedded script tags alert(document.cookie); will be encoded.
Some other exploits:
[size=expression(alert(document.cookie));]Size tag[/size]
[font=expression(alert(document.cookie));]Font tag[/font]
[float=expression(alert(document.cookie));]Float tag[/float]
[url=javascript:alert(document.cookie)]Click here to see cookie[/url]
[anchor=javascript:alert(document.cookie)]Anchor[/anchor]
[img]javascript:document.location='http://www.albinoblacksheep.com/flash/you.html'[/img]
[img]javascript:alert('XSS')[/img]
http://host.com/?act=SR&f='>alert(document.cookie)
Broken tags
We need to ensure that bad formating will not disrupt your site's HTML.
Broken [b]bold text...
- A broken list...
A broken quote...
