Channel 9 Editor Tips & Tricks

Typing a URL
If you type wwww.microsoft.com
and hit enter - the URL will not work.
But if you hit the spacebar after the URL - it will become clickable - www.microsoft.com <- space
* This saves C9 members from copying and pasting your link into the address bar


Pasting in a picture
Go to any site on the Internet (not your local drive) - right click image and say "Copy"
Come back to your C9 post, click where you'd like and hit paste.
** Many posts seem to have missing images

Directly highlight html/tables/etc from FrontPage
Open Frontpage - make something - preview tab - highlight - copy - and paste into C9 thread.
*You dont even need to save it or upload it

Example:

I am cell one Arial

I am cell 2 Verdana

Never Hit The Back Button after posting
This will take you back to the open post in a never-ending "Back" loop - with no direct link back to Coffeehouse - so you will need to click Forums/Coffeehouse to get back to your thread

Make text a hyperlink using keyboard
Highlight the text - hit Control-K - paste URL - say ok


[ Got a tip or trick? Post it here ]


* These tips may or may not work in other browsers than IE 

Scripts also work when pasted

Edit by Bryn: Removed page transitions.

I completly agree with Jamie on this one. Especially about the copy and paste pictures.
I don't want to have to host my pictures on a seperate server and then have to put in the link to it in the html code. And also is it just me or am I actually seeing page transitions on c9?

I don't know if I caused the page transitions,
c9 caused the page transitions or
Jamie caused the page transitions:


Loadsgood - Might have caused it through editing advanced options of my IE browser (meaning the page transitions might have always been there I just wasn't seeing them before).

c9 - Might have just recently, (or always been that way), edited the site to make a page transition.

Jamie - He said "Mwa ah ah" in his previous post, so he could have done it.


Anyway who ever did it, I have to say:

"The transitions looked like $#!+ so I removed the option of being able to see them."

or

"Worsed page transition ever."

Hey Jamie, I can't save a document on your editor, because I can't login.
But I like www.freetextbox.com much better. Does it remind anyone of anything?

Oh yes and I just found google free source on google's site so I decided to add it below.

WWW Channel 9

"And also is it just me or am I actually seeing page transitions on c9?"

Mwa ah ah



* re pictures - i was just saying most people link to their hard drive - forgetting it has to be on the net

having a 30 meg default on c9 for each user - "deemed" worthy - after a month or so - would be a good idea though - then we could actually drag "in" to this post window

* love the c9 editor

Loadsgood wrote:

Hey Jamie, I can't save a document on your editor, because I can't login.

true - and were you ever right about that transition - almost makes you blind.. never seen it before though so im leaving it for now - as an oddity

***here is code for anyone interested - though this isnt whats effecting C9 *** thats from a direct paste of a word with that code in the head of existing html doc ***

<meta http-equiv="Page-Enter" content="progid:DXImageTransform.Microsoft.Pixelate(Duration=2)">
<meta http-equiv="Page-Exit" content="progid:DXImageTransform.Microsoft.Pixelate(Duration=2)">

i wanted to point out though - on embedded editor above - for you to check out cut and paste
that works without login

C9 should add that to their editor - as it is basically the same thing and a hassle to go to Edit drop-down for something we could have work like windows does inline - copy/cut/paste

Jamie,

It's in your original code. Copy / pasted from FP:

http-equiv=Page-Enter content=progid:DXImageTransform.Microsoft.Pixelate(Duration=2)
 
http-equiv=Page-Exit content=progid:DXImageTransform.Microsoft.Pixelate(Duration=2)

Remove the META tags with that info in it.

Jamie,

I'm not sure that scripts do, in fact, work when pasted. Pasting <script>alert('Blammo!')</script> just prevents my post from appearing at all.

seems you are correct..

i was reffering to the transition script - didnt specifically try <script> command

Your browser does not support inline frames or is currently configured not to display inline frames.

although - as it runs iframes - you could do it that way

* It should be working now

* perhaps i should rename this thread: How to totally screw up C9 using the editor.. this was NOT the original intention of this post

It's actually a good thing. Wouldn't want some script-kiddie troll trying a cross site scripting attack on Channel 9. "Secure Computing Initiative" and all . . .

...I take that back now that you've eddited your post. This is BAD Channel 9! Very BAD.

true -

someone would just have to paste and iframe - with this this exact thread as the destination page - and im assuming it would loop and bomb

Ugh...the more I think about this, the more I think something should be done about this by the admins...and soon.  As soon as I saw the page transition here the other day, I thought it was interesting at first, but now this could turn into a major hole.

it seems they have blocked the words <script>

maybe they could block <iframe>

?

jamie wrote:

it seems they have blocked the words <script>

maybe they could block <iframe>

?

Hey! That's not playing nice.

Anyway, we're discussing what to do with this internally. Just FYI, I'm pretty sure it's not actually an XSS vulnerability. The reason is that the script isn't actually running under the channel9.msdn.com domain, it's running under the gnuarts domain. If the script said something like:

alert(top.document.body.innerHTML);

It would throw an access denied exception (because cross site scripting is not allowed). Feel free to prove me wrong on that point.

We are sort of worried that this sort of stuff could get a little out of hand though, so we're looking at ways to mediate the problem. Expect to not be able to put IFrames in your posts any more, and we'll probably block the filter attribute in your CSS as well. (We currently only block expression()). Hmm, maybe we should block behavior: and url() as well...
 
We'll keep you posted.

-Bryn

..but that editor lets you paste anything...

dont see how you could limit this without a re-write of core windows clipboard - or removing ability altogether

?

kind of looks like you can add sounds too... muahahahahaha

ok ok

let's not break the whole thread!

karim can you remove this??

haha

jamie i deleted the entire post and it was still broken... looks like the formatting broke at the end of manip's test, not at the beginning of mine