** Changed in: mahara/1.10 Assignee: (unassigned) => Son Nguyen (ngson2000)
-- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1384467 Title: CSS is not stripping out bad css attributes anymore Status in Mahara ePortfolio: In Progress Status in Mahara 1.10 series: Confirmed Status in Mahara 15.04 series: In Progress Bug description: If I add some custom CSS to a skin that has badly formed css it doesn't strip out the bad lines. eg: #footer { color: #deface; top:cat; width: 300px; odd:fellow; } It used to strip it down to leave the valid lines. eg: #footer { color: #deface; width: 300px; } This looks to have been broken with this patch https://reviews.mahara.org/#/c/3846/ Well not broken as such but the $preserve_css should be able to be set via either the site config or directly in the config.php file so that only sites that want to allow things like comments in the css can turn it on rather than it be on by default for the skins. It still strips out html tags - so that is good To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1384467/+subscriptions _______________________________________________ Mailing list: https://launchpad.net/~mahara-contributors Post to : mahara-contributors@lists.launchpad.net Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp