[jira] [Created] (INFRA-7073) Teach Roller to support embedded content and syntax highlighting

["Dave Cottlehuber (JIRA)" <ji...@apache.org>]

Dave Cottlehuber created INFRA-7073:
---------------------------------------

             Summary: Teach Roller to support embedded content and syntax highlighting
                 Key: INFRA-7073
                 URL: https://issues.apache.org/jira/browse/INFRA-7073
             Project: Infrastructure
          Issue Type: Bug
          Components: Blogs
            Reporter: Dave Cottlehuber
            Priority: Minor


It's not possible to embed youtube videos, nor enable syntax highlighting for code snips at the moment in Roller.

# Embedding

One possible work-around is to enable `weblogAdminsUntrusted=false` in the roller config. Obviously this means any blog account could publish raw html, in the event of it being hacked this would be a Bad Thing.

A more sophisticated solution would be to extend roller to permit some tags and not others, or to require a reviewer +1 for posts with tagged HTML content.

# Syntax Highlighting.

Either permit HTML tags, and let the rendering be done prior to the blog post client-side, or create a 2nd template cloned off the ASF one, with a browser-side code block detection and highlighting. 

one of either 
- http://highlightjs.org/
- http://alexgorbatchev.com/SyntaxHighlighter/
- http://code.google.com/p/google-code-prettify/

As mentioned earlier I'm keen to work on the highlighting with some guidance.

# Alternatives

Switch to a static blogging system that derives content from markdown, with HTML passthrough possible. This would restrict publishing to committers via push, and be more secure. Comments then need to be outsourced to e.g. disqus or similar though.



--
This message was sent by Atlassian JIRA
(v6.1#6144)