Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-32427

HTML Purifier strips non standard protocol links such as rtsp

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: Minor Minor
    • 2.1.6, 2.2.3
    • 2.2, 2.2.1, 2.2.2
    • Other
    • None

      When upgrading a site from 2.1 to 2.2, we find that the HTML Purifier setting is no longer listed in Site Policies. Un-checking this setting was allowing us to access to thousands of video links on our site, which were created as in-line text links inside Glossary entries (essentially forming a video library).

      The streaming links (both Quicktime and Flash) are stripped during the HTML Purification process to just <a>tagged words like this</a>. When we un-check the setting in 2.1, the full links are returned. The Enable Trusted Content setting is on, and so is the Embed/Object tag setting.

      With the setting gone in 2.2, we are facing a huge content access problem.

      Can anyone describe why the setting was removed, and/or let me know if this is something that can be brought back? If not, what can I do to ensure that my links are not cleaned? Thanks so much for your help!

      Laura Mikowychok

            skodak Petr Skoda
            lmikowychok Laura Mikowychok (Inactive)
            Dan Poltawski Dan Poltawski
            Michael de Raadt Michael de Raadt
            Votes:
            2 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved:

                Error rendering 'clockify-timesheets-time-tracking-reports:timer-sidebar'. Please contact your Jira administrators.