← Back to team overview

mahara-contributors team mailing list archive

[Bug 1858042] Re: Whitelist more HTML tags in HTML Purifier, e.g. <pre>

 

** Changed in: mahara
    Milestone: None => 21.04.0

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1858042

Title:
  Whitelist more HTML tags in HTML Purifier, e.g. <pre>

Status in Mahara:
  Confirmed

Bug description:
  Please include (if relevant) in your bug report:
  - exact version of Mahara (19.10)
  - operating system (Linux Debian 10.1)
  - database (Mariadb 10)
  - browser and version (Firefox 62)

  When I create a portfolio page that contains data
  that is inside pre tags that data is not displayed
  when the page is viewed.

  In order to work around this I comment out the
  purify function in HTMLpurifier. Doing this
  completely disables the purifier.

  When the purifier is disabled mahara will not
  save skin modifications or creations.

  In order to work around this I maintain two
  versions of HTMLPurifier.php. One version has the
  purifier function commented out and the other
  version is the original file. When I need to
  edit or create a skin I copy the original file
  into place, once I'm done I copy the modified
  file into place.

  This is not a fix as such unless removing
  HTMLPurifier.php completely is a fix. It's been 
  mentioned that there is or could be a white list
  of currently purified tags that are not to be
  purified. For my case that could work, but in
  general it might become a slippery slope for 
  everyones pet tags.

  So, sad to say, I don't have a patch to fix
  my problem. I don't even have a suggestion.

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1858042/+subscriptions


References