Announcement

Collapse
No announcement yet.

Use of <script> in WYSIWYG field

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • Maximus
    commented on 's reply
    > What version of Summernote is being used? Is it possible for me to upgrade my local version of summernote in EspoCRM to the latest without screwing things up royally?

    Unfortunately, it is out of my knowledge scope. I will push this topic to the Developer Help branch. Hope someone might help you.

  • lilfurson
    replied
    I've tried really hard to get the script tag to work utilizing the documentation as well as trying to edit the code to remove the regex expression for filtering. Nothing I do seems to work though. What version of Summernote is being used? Is it possible for me to upgrade my local version of summernote in EspoCRM to the latest without screwing things up royally?

    Leave a comment:


  • Maximus
    replied
    Hi there,
    The <script> tag is filtrating because of XSS protection. Please Investigate this WYSIWYG editor documentation in order to find of how to disable the <script> tag filter https://summernote.org/.

    Leave a comment:


  • lilfurson
    started a topic Use of <script> in WYSIWYG field

    Use of <script> in WYSIWYG field

    Hi everyone, new user...

    I'm trying to get a widget into a field on an accounts page. I've made the field wysiwyg and tried to add a <script> line to it but the editor just deletes it. I'm assuming this is a way to stop the system from being hijacked but is there a way to allow it? Or maybe a different field to use?

    The following was what I am trying to add...
    <!-- Macroaxis Widget Start --><script src="https://www.macroaxis.com/widgets/url.jsp?t=45&s=BKRRF"></script><div class="macroaxis-copyright"></div><!-- Macroaxis Widget End -->

    Thanks for the help
Working...
X