Hi, I would like to put some HTML formatting in the title of a block. Since it is by default sanitized of HTML code,

1) Is it safe to do this? I can't think of a security problem if only admins can do it, and they can easily put HTML code in the content of the block itself.

2) Which file will I need to edit to remove the text sanitization of the block title? I've looked around and can't find it.

Thanks in advance!

Block title will be "setVar" AND "getVar" when it be saved and get .so it could not use HTML.

u can find some place where it be saved and get.

and modify it .

you can see kernel/object.php to find "function getVar" then you will know how to do.


i am sorry,my english i too poor.

OK, thanks... I don't suppose there's already a hack out there that does something similar that I can adapt, or will I have to go hack it myself?

Now at least I have found the problem source, thanks for helping with that.



Nevermind, I hacked it myself by adding a case check for 'H' to the getVar function that allows HTML to pass through. Again, thanks for your help!