Xss::filterAdmin() to allow "template" elements

Created on 25 April 2024, 12 months ago

Problem/Motivation

Custom Text in Views do not allow rendering template tag, which is a powerful way to do Javascript rendering templates in HTML. The list of tags allowed is limited by Xss::filterAdmin (as specified in Xss::$adminTags).

Steps to reproduce

Create any view that renders template element.

Proposed resolution

Add 'template' to Xss::$adminTags.

Remaining tasks

Discussion and code implementations.

User interface changes

None.

API changes

None.

Data model changes

None.

Release notes snippet

Allow to render "dialog" element in Views "Global: Custom Text" and other rendering context using Xss::filterAdmin.

✨ Feature request

Status

Active

Version

11.0 🔥

Component

Base →

Last updated 23 minutes ago

Maintained by
🇺🇸United States @effulgentsia
🇬🇧United Kingdom @catch
🇬🇧United Kingdom @alexpott
🇦🇺Australia @larowlan
🇺🇸United States @bnjmnm
🇫🇷France @nod_
🇪🇸Spain @ckrina
🇬🇧United Kingdom @justafish

Created by

🇭🇰Hong Kong yookoala

Live updates comments and jobs are added and updated live.

Comments & Activities

Issue created by @yookoala
Comment 9 months ago →
🇨🇦Canada Liam Morland Ontario, CA 🇨🇦
Status changed to Closed: duplicate 8 days ago10:43am 10 April 2025
Comment 8 days ago →
🇫🇷France duaelfr Montpellier, France
Progress has been made in 📌 Review/update $adminTags variable for new html elements to be whitelisted Needs work

contrib.social Blog FAQ Discussions

Production build 0.71.5 2024