Hi,
I noticed that if you do < test > between ''' ''', you get

```
< test >
```
But between code/code, you get

< test >

Flatboard accepts in part the markdown format.
Because the signs :

< > 

can open the door to malicious code in Javascript, so use the bbcode [code] to normally display the unexecuted html code.
ex: <script>alert('Alert XSS')</script>
In the [Doc page](view.php/plugin/page/p/docs), i authorize all html & markdown content, because only admin post page.
**We must not forget that any intervenor access to the editor to post a new topic or reply.**

Sure, I understand, thank you.

test