[development] How to control HTML user input preserving the "style" attributes?

[Leo Burd]

Hello there,

Thanks so much for recommending usernode and bio modules.  However, none of 
those modules addresses the issue of controlling HTML tags with 'style' 
attributes...

Best,

Leo

----- Original Message ----- 
From: "Gabor Hojtsy" <gabor at hojtsy.hu>
To: <development at drupal.org>
Cc: <support at drupal.org>
Sent: Monday, October 23, 2006 10:43 AM
Subject: Re: [development] How to control HTML user input preserving the 
"style" attributes?


> Hi Leo,
>
> Maybe you are interested in looking at the usernode or bio modules before 
> you start off with another module with this functionality :)
>
> Gabor
>
> Leo Burd wrote:
>> Hello there,
>>
>> I am creating an about_me.module to provide users with a customizable 
>> "about me" page.  That page is to be very simple: a title field and a 
>> textarea for users to write whatever they want.  Ideally, users should be 
>> able to customize their pages either by writing directly in HTML or by 
>> using TinyMCE.
>>
>> The problem that I'm having is that the formatting added by TinyMCE 
>> (especially the "style" attributes) are being filtered out by 
>> filter.module. An alternative would be to not filter the HTML tags at 
>> all, but I'm afraid that would add potential risks to my website. Is 
>> there any solution for this problem? What would you recommend?
>>
>> Thanks in advance,
>>
>> Leo
>>
>