]> BookStack Code Mirror - bookstack/commit
Comments: Added HTML filter on load, tinymce elem filtering
authorDan Brown <redacted>
Wed, 31 Jan 2024 16:20:22 +0000 (16:20 +0000)
committerDan Brown <redacted>
Wed, 31 Jan 2024 16:20:22 +0000 (16:20 +0000)
commit06901b878f2c8057a6f9b7d2e0adfda425c68dee
treee7b08ff57a46c70fe1002c220e5ad26e20886de6
parente9a19d587857ba5afcaa411718af61b62aaff1ac
Comments: Added HTML filter on load, tinymce elem filtering

- Added filter on load to help prevent potentially dangerous comment
  HTML in DB at load time (if it gets passed input filtering, or is
  existing).
- Added TinyMCE valid_elements for input wysiwygs, to gracefully degrade
  content at point of user-view, rather than surprising the user by
  stripping content, which TinyMCE would show, post-save.
app/Activity/Models/Comment.php
resources/js/wysiwyg/config.js
resources/views/comments/comment.blade.php
tests/Entity/CommentTest.php
Morty Proxy This is a proxified and sanitized view of the page, visit original site.