Uploaded image for project: 'Magnolia UI'
  1. Magnolia UI
  2. MGNLUI-7422

Configure default SafeHtmlValidatorDefinition to support globallyAllowedAttributes

    XMLWordPrintable

Details

    • Improvement
    • Resolution: Done
    • Neutral
    • 6.2.26
    • 6.2.22
    • None

    Description

      Currently customers facing difficulties when using RichText Editor due to our newly introduced Global Validators - SafeHtmlValidatorDefinition.
      Customer need to decorate "/ui-framework-core/config.yaml" to allow some basic attributes such as "class" and "style" for mostly usage tags such as "p" and "h1,h2,h3,h4".

      Please improve this by adding as much as possible tags and attributes that does not an attack vector for XSS.
      Customer don't want to "workaround" in this case due to overlapping of the workaround and future improvement. Also applying any "workaround" would bear with it the maintenance costs from customers side.

      There were expectations to made this natively supported by us.
      Expected result:
      High frequently usage tags and attributes should have been in place in "/ui-framework-core/config.yaml" for normal usage.

      Checklists

        Acceptance criteria

        Attachments

          Issue Links

            Activity

              People

                thien.quach Quach Hao Thien
                viet.nguyen Viet Nguyen
                Nucleus
                Votes:
                1 Vote for this issue
                Watchers:
                6 Start watching this issue

                Dates

                  Created:
                  Updated:
                  Resolved:

                  Checklists

                    Task DoD

                    Time Tracking

                      Estimated:
                      Original Estimate - Not Specified
                      Not Specified
                      Remaining:
                      Remaining Estimate - Not Specified
                      Not Specified
                      Logged:
                      Time Spent - 4d 4.5h
                      4d 4.5h