By nicxvan on
Change record status:
Published (View all published change records)
Project:
Introduced in branch:
10.4.x, 11.1.x
Introduced in version:
10.4.0, 11.1.0
Issue links:
Description:
This change has been reverted in 10.4.3 and 11.1.3 - see #3497758: Regression: RssResponseCdata filtering out common HTML tags from RSS feeds
The description tag of an RSS feed is now wrapped in CDATA and the HTML output is no longer escaped.
A new event subscrber, RssResponseCdata was added to add the CDATA directive and provide XSS Filtering. Since this can be user entered data we use strict filtering.
This change should require no action on a site owner. Description tags will automatically be wrapped in CDATA.
Impacts:
Site builders, administrators, editors
