message not filtered [#370273]

Comment	File	Size	Author
#2	ecard-370273-2.patch	486 bytes	tom_buytaert
#1	ecard-370273-1.patch	384 bytes	tom_buytaert

Comment #1

tom_buytaert CreditAttribution: tom_buytaert commented 6 February 2009 at 17:11

File	Size
ecard-370273-1.patch	384 bytes

I attached a patch, in which the message is sent through filter_xss()

Log in or register to post comments

Comment #2

tom_buytaert CreditAttribution: tom_buytaert commented 6 February 2009 at 17:15

File	Size
ecard-370273-2.patch	486 bytes

Same patch, but this one also allows the use of images.

Or should check_markup() be used instead of filter_xss() ?

Log in or register to post comments

Comment #3

Kars-T CreditAttribution: Kars-T commented 8 February 2009 at 15:01

Assigned:

Unassigned

» Kars-T

Hi thanks for the patch. In D5 I used check_markup but with always the default filter applied. For the next D6 patch I will alter the data structure and apply check_markup() sothe user can use any allowed filters to his role. I will do this probably next week.