Missing crucial allowed markup tags in views

Created on 18 February 2025, about 2 months ago

Problem/Motivation

Currently, the system only permits the use of the following tags: ['img', 'br', 'h2', 'h3', 'h4', 'h5', 'h6', 'span', 'strong', 'em', 'i', 'small']. This limitation results in the absence of various styles due to the exclusion of essential tags such as div, svg, caption, and others.

Steps to Reproduce

Add a custom text field to a view.
Incorporate tags that are not included in $allowed_markup.
Designate it as the panel group.
Observe the missing tags.

Proposed resolution

Add the same allowed tags that are defined on Xss class.

Remaining tasks

User interface changes

API changes

Data model changes

🐛 Bug report

Status

Active

Version

5.5

Component

Code

Created by

🇯🇴Jordan Ahmad Khader

Live updates comments and jobs are added and updated live.

Comments & Activities

Issue created by @Ahmad Khader
Comment about 2 months ago →
🇯🇴Jordan Ahmad Khader
Comment about 2 months ago →
🇯🇴Jordan Ahmad Khader
First commit to issue fork.
Comment 15 days ago →
🇺🇸United States shelane
The problem is that allowing all of the tags from xss::getAdminTagList() in accordion and tags would break the required structure for these Bootstrap components. The list is limited for the accordion collapse element, but not the accordion body and for the tab, but not the tab-pane area.

contrib.social Blog FAQ Discussions

Production build 0.71.5 2024