On Jun 26, 2007, at 5:34 AM, Morbus Iff wrote:
Question: Should all tags in aggregated content be stripped? If not, then what tags should be allowed? If I use filter_xss then what tags should I allow? Is there some specification or article on what HTML tags should be allowed to go through? How do aggregation module authors handle this or advise that it be handled?
One of the feature requests for aggregator.module has, for a while, been to allow the user to decide what tags are allowed in the feed (this may have actually happened actually - I haven't checked in a while). Ultimately, what would be most ideal would be to hook aggregator up to the Drupal input formats - then a user could define as many aggregator related import formats as they'd like, and assign them however they'd like to whatever feeds they have ("this one allows images", "this one doesn't" ... "ooh, this one always does things in a blockquote", etc.)
This feature already exists. http://yourdomain.com/admin/content/ aggregator/settings has a field, "Allowed HTML tags:" where you can designate what tags shall be passed through from feeds into your site. Laura