I added a temporary custom filter for youtube to let the iframes
through.  We will remove it when htmlpurifier implements a SafeIframe
option.

** Changed in: mahara
       Status: New => Fix Committed

** Changed in: mahara
     Assignee: (unassigned) => Richard Mansfield (richard-mansfield)

** Changed in: mahara
    Milestone: None => 1.4.0

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
https://bugs.launchpad.net/bugs/708327

Title:
  Youtube embed code removed by htmlpurifier

Status in Mahara ePortfolio:
  Fix Committed

Bug description:
  The default embed code on youtube is now an iframe, which gets
  stripped out by htmlpurifier.  See
  http://htmlpurifier.org/phorum/read.php?3,5255,5261

  We may need to go back to the bad old days of custom htmlpurifier
  filters.

  We'd also need to allow iframes through from tinymce (add
  "iframe[src|width|height|align|title|class|type|frameborder|allowfullscreen]"
  or similar to extended_valid_elements)



_______________________________________________
Mailing list: https://launchpad.net/~mahara-contributors
Post to     : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help   : https://help.launchpad.net/ListHelp

Reply via email to