1
mudikins
HTML in Block title?
  • 2005/12/18 7:23

  • mudikins

  • Just popping in

  • Posts: 7

  • Since: 2005/11/29


Hi, I would like to put some HTML formatting in the title of a block. Since it is by default sanitized of HTML code,

1) Is it safe to do this? I can't think of a security problem if only admins can do it, and they can easily put HTML code in the content of the block itself.

2) Which file will I need to edit to remove the text sanitization of the block title? I've looked around and can't find it.

Thanks in advance!

2
wenmingpig
Re: HTML in Block title?
  • 2005/12/18 8:21

  • wenmingpig

  • Just popping in

  • Posts: 4

  • Since: 2005/1/28


Block title will be "setVar" AND "getVar" when it be saved and get .so it could not use HTML.

u can find some place where it be saved and get.

and modify it .

you can see kernel/object.php to find "function getVar" then you will know how to do.


i am sorry,my english i too poor.

3
mudikins
Re: HTML in Block title?
  • 2005/12/18 8:25

  • mudikins

  • Just popping in

  • Posts: 7

  • Since: 2005/11/29


OK, thanks... I don't suppose there's already a hack out there that does something similar that I can adapt, or will I have to go hack it myself?

Now at least I have found the problem source, thanks for helping with that.



Nevermind, I hacked it myself by adding a case check for 'H' to the getVar function that allows HTML to pass through. Again, thanks for your help!

Login

Who's Online

371 user(s) are online (309 user(s) are browsing Support Forums)


Members: 0


Guests: 371


more...

Donat-O-Meter

Stats
Goal: $100.00
Due Date: Nov 30
Gross Amount: $0.00
Net Balance: $0.00
Left to go: $100.00
Make donations with PayPal!

Latest GitHub Commits