CommentFileSizeAuthor
#2 allow-html-on-block-tab-title_3135200-2.patch619 bytesscalas89

Comments

scalas89 created an issue. See original summary.

scalas89’s picture

scalas89 commented
StatusFileSize
new allow-html-on-block-tab-title_3135200-2.patch619 bytes
scalas89’s picture

scalas89 commented
Status: Active » Needs review
shelane’s picture

shelane
Primary language English
commented

Please use this instead: https://api.drupal.org/api/drupal/core%21lib%21Drupal%21Component%21Util...

scalas89’s picture

scalas89 commented

Thank you @shelane.
What do you think about this?https://api.drupal.org/api/drupal/core%21lib%21Drupal%21Component%21Util...

shelane’s picture

shelane
Primary language English
commented

@scalas89, that is not recommended for general use.

Applies a very permissive XSS/HTML filter for admin-only use.

Use only for fields where it is impractical to use the whole filter system...

I don't think there is a case where there is some kind of html for a tab that would need to be outside of the normal filtering. It may also be considered "insecure" as things like iframe are allowed.

g089h515r806’s picture

g089h515r806 commented
Status: Needs review » Fixed

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.