[support] Javascript in Drupal-Pages

Larry Garfield larry at garfieldtech.com
Sat May 5 03:17:35 UTC 2007


Even in Full HTML mode, Javascript is actively removed from pages.  Letting 
users add arbitrary javascript to a page lets them basically hijack any other 
user's session and do all sorts of evil and nasty things.  

I'm not sure off hand if using an input format that doesn't have HTML Filter 
enabled at all will allow you to insert Javascript, but even if you can you 
shouldn't.  Javascript should be added by the admin via the theme system.  

On Friday 04 May 2007, Andreas Rittershofer wrote:
> I'm looking for setting up JavaScript in Drupal Pages.
>
> I've "Full HTML" and the script-code at the top of the page, but I
> cannot get it running. Is there anything I'm missing?
>
> mfg ar
> --
> E-Learning in der Schule:
> http://www.dbg-metzingen.de/Menschen/Lehrer/Q-T/Rittershofer/E-Learning/


-- 
Larry Garfield			AIM: LOLG42
larry at garfieldtech.com		ICQ: 6817012

"If nature has made any one thing less susceptible than all others of 
exclusive property, it is the action of the thinking power called an idea, 
which an individual may exclusively possess as long as he keeps it to 
himself; but the moment it is divulged, it forces itself into the possession 
of every one, and the receiver cannot dispossess himself of it."  -- Thomas 
Jefferson


More information about the support mailing list