[development] How to control HTML user input preserving the "style" attributes?
Gabor Hojtsy
gabor at hojtsy.hu
Mon Oct 23 14:43:07 UTC 2006
Hi Leo,
Maybe you are interested in looking at the usernode or bio modules
before you start off with another module with this functionality :)
Gabor
Leo Burd wrote:
> Hello there,
>
> I am creating an about_me.module to provide users with a customizable
> "about me" page. That page is to be very simple: a title field and a
> textarea for users to write whatever they want. Ideally, users should
> be able to customize their pages either by writing directly in HTML or
> by using TinyMCE.
>
> The problem that I'm having is that the formatting added by TinyMCE
> (especially the "style" attributes) are being filtered out by
> filter.module. An alternative would be to not filter the HTML tags at
> all, but I'm afraid that would add potential risks to my website. Is
> there any solution for this problem? What would you recommend?
>
> Thanks in advance,
>
> Leo
>
More information about the development
mailing list