Skip to content

Sanitize input from rich text widget #18

Description

@nidico

Former title:

elements can break tinymce editor

You can shoot yourself in the foot by adding a <form> element to a document (e.g. through the tinymce source editor).

This breaks the wysiwyg editor, as it simply renders the document's html and erroneously closes the outer form, which makes the save/abort buttons not work anymore.

I'm not sure how this should best be dealt with - I guess the HTML source should be sanitized, e.g. <form> elements be removed.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions