mahara-contributors team mailing list archive

[Richard Mansfield <708327@xxxxxxxxxxxxxxxxxx>]

I added a temporary custom filter for youtube to let the iframes
through.  We will remove it when htmlpurifier implements a SafeIframe
option.

** Changed in: mahara
       Status: New => Fix Committed

** Changed in: mahara
     Assignee: (unassigned) => Richard Mansfield (richard-mansfield)

** Changed in: mahara
    Milestone: None => 1.4.0

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
https://bugs.launchpad.net/bugs/708327

Title:
  Youtube embed code removed by htmlpurifier

Status in Mahara ePortfolio:
  Fix Committed

Bug description:
  The default embed code on youtube is now an iframe, which gets
  stripped out by htmlpurifier.  See
  http://htmlpurifier.org/phorum/read.php?3,5255,5261

  We may need to go back to the bad old days of custom htmlpurifier
  filters.

  We'd also need to allow iframes through from tinymce (add
  "iframe[src|width|height|align|title|class|type|frameborder|allowfullscreen]"
  or similar to extended_valid_elements)