Use of <script> in WYSIWYG field

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • lilfurson
    Junior Member
    • Aug 2020
    • 17

    Use of <script> in WYSIWYG field

    Hi everyone, new user...

    I'm trying to get a widget into a field on an accounts page. I've made the field wysiwyg and tried to add a <script> line to it but the editor just deletes it. I'm assuming this is a way to stop the system from being hijacked but is there a way to allow it? Or maybe a different field to use?

    The following was what I am trying to add...
    <!-- Macroaxis Widget Start --><script src="https://www.macroaxis.com/widgets/url.jsp?t=45&s=BKRRF"></script><div class="macroaxis-copyright"></div><!-- Macroaxis Widget End -->

    Thanks for the help
  • Maximus
    Senior Member
    • Nov 2018
    • 2731

    #2
    Hi there,
    The <script> tag is filtrating because of XSS protection. Please Investigate this WYSIWYG editor documentation in order to find of how to disable the <script> tag filter https://summernote.org/.

    Comment

    • lilfurson
      Junior Member
      • Aug 2020
      • 17

      #3
      I've tried really hard to get the script tag to work utilizing the documentation as well as trying to edit the code to remove the regex expression for filtering. Nothing I do seems to work though. What version of Summernote is being used? Is it possible for me to upgrade my local version of summernote in EspoCRM to the latest without screwing things up royally?

      Comment


      • Maximus
        Maximus commented
        Editing a comment
        > What version of Summernote is being used? Is it possible for me to upgrade my local version of summernote in EspoCRM to the latest without screwing things up royally?

        Unfortunately, it is out of my knowledge scope. I will push this topic to the Developer Help branch. Hope someone might help you.
    Working...