- Issue created by @mchaplin
- 🇨🇱Chile mnovoa
Any solution to this?
I use Lexus Zymphonies Theme
and presents the problem described - 🇮🇹Italy mattyy21
Hi same problem here.
After update core to 7.99.
The old worked code is:<span class="high_contrast_switcher_high" style="display: inline;"><a href="javascript:drupalHighContrast.enableStyles()">Contrast</a></span>After the update, the no works code is
<span class="high_contrast_switcher_high"><a href="drupalHighContrast.enableStyles()">Contrast</a></span>Looks like strip the in the "a tag, javascript"
- 🇮🇳India u.tyagi
This issue is valid since dangerous protocols are omitted from link Paths in new 7.x core. In this particular case, this can be handled by strictly allowing only Highcontrast related function calls through the same chain. This can be done via edition includes/common.inc [line: 2621] and adding the functions in array variable $skip_js_paths.
The values that needs to be added should be in lowercase for it to work. i.e.
[...........,'javascript:drupalhighcontrast.enablestyles()','javascript:drupalhighcontrast.disablestyles()']