I want to add some SVG icons to my confirmation message. The message gets saved correctly but when it supposed to be displayed it doesn't work.
I tried implementing the following hook but it did not solve.
function cty_webform_preprocess_webform_html_editor_markup(array &$variables) {
// Ensure #allowed_tags is defined as an array.
$allowed_tags = $variables['content']['#allowed_tags'] ?? [];
// Add 'svg' tag only if it's not already present.
if (!in_array('svg', $allowed_tags, true)) {
$allowed_tags[] = 'svg';
}
if (!in_array('path', $allowed_tags, true)) {
$allowed_tags[] = 'path';
}
$variables['content']['#allowed_tags'] = $allowed_tags;
}
The only solution was to add the 'svg' and 'path' to the WebformXss::getAdminTagList
Active
6.2
Code
SVGs can contain scripts so to allow this in an XSS filter is a bit of a stretch.
I agree, we can't support SVG by default. You could create an HTML editor for webforms that supports SVG.