mahara-contributors team mailing list archive

[Mahara Bot <1843154@xxxxxxxxxxxxxxxxxx>]

Reviewed:  https://reviews.mahara.org/11547
Committed: https://git.mahara.org/mahara/mahara/commit/cb432471e3e78b94b7113ad650685d8cdcd5c919
Submitter: Robert Lyon (robertl@xxxxxxxxxxxxxxx)
Branch:    master

commit cb432471e3e78b94b7113ad650685d8cdcd5c919
Author: Gold <gold@xxxxxxxxxxxxxxx>
Date:   Fri Feb 12 15:15:05 2021 +1300

Bug 1843154: Allowlist more modern, CSS 3 rules

CSS.Proprietary enabled.

Added the following opacity related parameters to the
CSS.ForbiddenProperties:

* -moz-opacity
* -khtml-opacity
* filter
* opacity

For security reasons disable opacity parameters using
'CSS.ForbiddenProperties'.

Change-Id: I92275da57800b253ef88cf0d5413e1340599fdfd

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: mahara-contributors
https://bugs.launchpad.net/bugs/1843154

Title:
  Allowlist more modern, safe CSS 3 rules in HTMLPurifier

Status in Mahara:
  Fix Committed

Bug description:
  HTML purifier is stripping out border styles, e.g. <img style="border-
  radius:50%;"> which would allow images to be displayed in a circle
  without having to crop the image itself.

  It would be good to allow more modern CSS3 rules.

  Looking at what had been done for skins in bug #1264098 might help.

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1843154/+subscriptions