HTML.Trusted and Embed tag conflict?

33 views
Skip to first unread message

shmuel613

unread,
Nov 9, 2010, 12:48:09 PM11/9/10
to htmlpurifier
Is there a conflict between allowing embed tags and setting
HTML.Trusted to true? I need to allow for object/embed tags and
javascript for a special group of users, and the two seem to
conflict. This is obviously only a bug in IE, since object tags come
through fine. My currenct config is:

$config->set('HTML.Trusted', true);
$config->set('HTML.SafeObject', true);
$config->set('Output.FlashCompat', true);


Any ideas/solutions would be greatly appreciated.

Thanks!

Edward Z. Yang

unread,
Nov 9, 2010, 8:10:16 PM11/9/10
to shmuel613, htmlpurifier
Yes, HTML.Trusted and the SafeObject/SafeEmbed isn't a tested interaction
and I'm not really surprised it doesn't work. Maybe you can manually disable
the definition of Object that HTML.Trusted loads.

Edward

Reply all
Reply to author
Forward
0 new messages