Welcome Guest, Not a member yet? Register   Sign In
GLOBAL XSS FILTERING on 2.0.2 and CKEDITOR
#18

[eluser]Lawrence Leung[/eluser]
[quote author="hyperfire" date="1311326089"]Is this really a CI 2.02 bug? Just lost a whole hour trying to figure out what's wrong with the ckeditor aligment.
Disabling global XSS on config worked.
Is there a way to disable global for this specific field? Or any other workaround available?

Btw, Sudhakar@CI, implement ckeditor on CI is a breeze. Have you checked the forum?
http://ellislab.com/forums/viewthread/127374/
Or even CI wiki?

Can anyone share some toughts on this issue? I need to save html on this project. Disabling styles on POST is the reason why my client clients are goin bananas and disable global XSS is not an option as well.

Thanks.


Just checked another post (http://ellislab.com/forums/viewthread/191399/#903478) where bubbafoley suggested:

Code:
$config['global_xss_filtering'] = TRUE;

and then

Code:
$username = $this->input->post('username'); // filtered
$password = $this->input->post('password', FALSE); // unfiltered

But this does not work. Anyone?[/quote]

Yes, that doesn't work (I think it should be work, otherwise the False parameter is useless). So I simply remove the 'style' in system/core/security/_remove_evil_attributes


Messages In This Thread
GLOBAL XSS FILTERING on 2.0.2 and CKEDITOR - by El Forum - 04-10-2011, 10:16 AM
GLOBAL XSS FILTERING on 2.0.2 and CKEDITOR - by El Forum - 04-10-2011, 11:10 AM
GLOBAL XSS FILTERING on 2.0.2 and CKEDITOR - by El Forum - 04-12-2011, 12:05 AM
GLOBAL XSS FILTERING on 2.0.2 and CKEDITOR - by El Forum - 05-09-2011, 11:45 PM
GLOBAL XSS FILTERING on 2.0.2 and CKEDITOR - by El Forum - 05-12-2011, 02:49 AM
GLOBAL XSS FILTERING on 2.0.2 and CKEDITOR - by El Forum - 05-12-2011, 05:11 AM
GLOBAL XSS FILTERING on 2.0.2 and CKEDITOR - by El Forum - 05-19-2011, 11:05 AM
GLOBAL XSS FILTERING on 2.0.2 and CKEDITOR - by El Forum - 05-31-2011, 12:30 PM
GLOBAL XSS FILTERING on 2.0.2 and CKEDITOR - by El Forum - 06-10-2011, 06:11 PM
GLOBAL XSS FILTERING on 2.0.2 and CKEDITOR - by El Forum - 06-17-2011, 11:31 AM
GLOBAL XSS FILTERING on 2.0.2 and CKEDITOR - by El Forum - 06-17-2011, 11:38 AM
GLOBAL XSS FILTERING on 2.0.2 and CKEDITOR - by El Forum - 07-07-2011, 06:03 AM
GLOBAL XSS FILTERING on 2.0.2 and CKEDITOR - by El Forum - 07-21-2011, 10:14 PM
GLOBAL XSS FILTERING on 2.0.2 and CKEDITOR - by El Forum - 07-22-2011, 01:39 AM
GLOBAL XSS FILTERING on 2.0.2 and CKEDITOR - by El Forum - 07-22-2011, 03:10 AM
GLOBAL XSS FILTERING on 2.0.2 and CKEDITOR - by El Forum - 07-28-2011, 01:29 AM
GLOBAL XSS FILTERING on 2.0.2 and CKEDITOR - by El Forum - 07-30-2011, 05:09 AM
GLOBAL XSS FILTERING on 2.0.2 and CKEDITOR - by El Forum - 08-10-2011, 01:10 AM
GLOBAL XSS FILTERING on 2.0.2 and CKEDITOR - by El Forum - 08-12-2011, 12:50 AM
GLOBAL XSS FILTERING on 2.0.2 and CKEDITOR - by El Forum - 08-12-2011, 07:51 AM
GLOBAL XSS FILTERING on 2.0.2 and CKEDITOR - by El Forum - 08-13-2011, 08:44 PM
GLOBAL XSS FILTERING on 2.0.2 and CKEDITOR - by El Forum - 02-08-2012, 11:48 AM
GLOBAL XSS FILTERING on 2.0.2 and CKEDITOR - by El Forum - 07-24-2012, 09:03 AM
GLOBAL XSS FILTERING on 2.0.2 and CKEDITOR - by El Forum - 09-22-2012, 01:57 AM
GLOBAL XSS FILTERING on 2.0.2 and CKEDITOR - by El Forum - 08-20-2013, 02:29 PM



Theme © iAndrew 2016 - Forum software by © MyBB