[Project_owners] php file execution for trusted projects

Jake Hartz jake33 at rocketmail.com
Sun Oct 3 07:38:35 PDT 2010


Drupal blocks the style attribute, so I can't just do something like 
<span style="...">. This also leads to some other problems, but I think 
it is much easier to allow <sup> than to edit the source code to allow 
the style attribute (and the <style> tag is blocked, along with <link>, 
etc.)

--Jake

On 10/03/2010 10:33 AM, Benoit Renard, msnmsgr wrote:
> Jake Hartz wrote:
>> Also, I believe the <sup> tag can be whitelisted in the 
>> administration settings for the input formats (under "site 
>> configuration" - http://www.mozdev.org/drupal/admin/settings/filters) 
>> by selecting "Filtered HTML" (or whatever it is) and then going to 
>> the "Configure" tab. Then, the references to footnotes in the 
>> WhyMozdev page (which are already enclosed in <sup> tags, but Drupal 
>> is stripping them) will actually appear like they should.
>
> The sup HTML element is purely presentational, so it should not be 
> allowed. Use proper semantics and styling instead.
> _______________________________________________
> Project_owners mailing list
> Project_owners at mozdev.org
> https://www.mozdev.org/mailman/listinfo/project_owners
>
>






      



More information about the Project_owners mailing list