CS2.1 and Javascript

rated by 0 users
This post has 5 Replies | 2 Followers

Not Ranked
Posts 9
Points 135
aub Posted: Wed, Aug 9 2006 9:49 AM

I've noticed thatwhen I double-click editable regions on the main page, and enter code for javascript in the HTML editor, it is stripped out when I save changes.

Is this a bug?  Why would the HTML editor strip out javascript?

Top 500 Contributor
Posts 88
Points 1,695

If I am hearing you correctly, and I don't think I am but I'm not shy so I'll say it anyway Stick out tongue, I think it is desired behaviour to stop people from including executable script in their posts.

example:

<a href="java script:alert('hello world' ) ">Click </a>

^^ remove the space between java and script and the post won't be accepted.

 

I am pretty sure this isn't what you are talking about though.... just in case!!!!

Regards, CommunityServer guy Available for hire for small jobs!!!!!
  • | Post Points: 5
Not Ranked
Posts 9
Points 135
aub replied on Wed, Aug 9 2006 11:23 AM

Thanks for the pointer, but I already knew about that one.

 

  • | Post Points: 5
Top 10 Contributor
Posts 3,424
Points 65,735
CS Developers
Ben Tiedt replied on Wed, Aug 9 2006 11:59 AM
You have uncovered a bug in the configuration of TinyMCE's html cleanup logic.  This issue has been corrected post CS2.1 RC1.  TinyMCE will now validate against XHTML.

Ben Tiedt's Blog

  • | Post Points: 5
Top 10 Contributor
Posts 3,424
Points 65,735
CS Developers
Ben Tiedt replied on Wed, Aug 9 2006 12:00 PM
Note that even though TinyMCE (the editor used in CS2.1) will not strip SCRIPT tags, such content is still subject to any server-side HTML scrubbing that is enabled (as an example, for post content).

Ben Tiedt's Blog

  • | Post Points: 20
Not Ranked
Posts 9
Points 135
aub replied on Wed, Aug 9 2006 3:40 PM

I hate to say it, but I've had enough.

CommunityServer has the potential to be a great product, but it's still a long ways away.

It's just not user-friendly enough, too difficult to modify, and not stable enough for prime-time.  I lost my main site with the ever-popular "We are unable to server your request" error.  It just died for no reason. I hadn't modified anything, or even touched it  in 3 days.

I'm going to have to move on to another CMS.  I may give CS another shot after the product becomes more user-friendly and stable.

  • | Post Points: 5
Page 1 of 1 (6 items) | RSS
Powered by Community Server (Commercial Edition), by Telligent Systems

Copyright© 2008 Telligent Systems Inc. All rights reserved
CommunityServer.com  •  Telligent.com