mirrors/zotero
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages 1 Wiki Activity Actions

Update whitelist for TinyMCE

Browse source
This commit is contained in:
Dan Stillman 2019-09-16 00:18:51 -04:00
parent c3c7f0a8ae
commit 3f3b6501ce
2 changed files with 85 additions and 18 deletions
Download patch file Download diff file Expand all files Collapse all files

44
resource/tinymce/note.html
View file

@ -31,6 +31,50 @@
link_assume_external_targets: true, link_assume_external_targets: true,
nonbreaking_force_tab: 4, nonbreaking_force_tab: 4,
// More restrictive version of default set, with JS/etc. removed
valid_elements: "@[id|class|style|title|dir<ltr?rtl|lang|xml::lang],"
+ "a[rel|rev|charset|hreflang|tabindex|accesskey|type|name|href|target|title|class],"
+ "strong/b,"
+ "em/i,"
+ "strike,"
+ "u,"
+ "#p,"
+ "-ol[type|compact],"
+ "-ul[type|compact],"
+ "-li,"
+ "br,"
+ "img[longdesc|usemap|src|border|alt=|title|hspace|vspace|width|height|align],"
+ "-sub,-sup,"
+ "-blockquote[cite],"
+ "-table[border=0|cellspacing|cellpadding|width|frame|rules|height|align|summary|bgcolor|background|bordercolor],"
+ "-tr[rowspan|width|height|align|valign|bgcolor|background|bordercolor],"
+ "tbody,thead,tfoot,"
+ "#td[colspan|rowspan|width|height|align|valign|bgcolor|background|bordercolor|scope],"
+ "#th[colspan|rowspan|width|height|align|valign|scope],"
+ "caption,"
+ "-div,"
+ "-span,"
+ "-code,"
+ "-pre,"
+ "address,"
+ "-h1,-h2,-h3,-h4,-h5,-h6,"
+ "hr[size|noshade],"
+ "-font[face|size|color],"
+ "dd,dl,dt,"
+ "cite,"
+ "abbr,"
+ "acronym,"
+ "del[datetime|cite],ins[datetime|cite],"
+ "bdo,"
+ "col[align|char|charoff|span|valign|width],colgroup[align|char|charoff|span|valign|width],"
+ "dfn,"
+ "kbd,"
+ "label[for],"
+ "legend,"
+ "q[cite],"
+ "samp,"
+ "var,",
target_list: false, target_list: false,
setup: function (editor) { setup: function (editor) {

59
resource/tinymce/noteview.html
View file

@ -28,24 +28,47 @@
// More restrictive version of default set, with JS/etc. removed // More restrictive version of default set, with JS/etc. removed
valid_elements: "@[id|class|style|title|dir<ltr?rtl|lang|xml::lang]," valid_elements: "@[id|class|style|title|dir<ltr?rtl|lang|xml::lang],"
+ "a[rel|rev|charset|hreflang|tabindex|accesskey|type|" + "a[rel|rev|charset|hreflang|tabindex|accesskey|type|name|href|target|title|class],"
+ "name|href|target|title|class],strong/b,em/i,strike,u," + "strong/b,"
+ "#p,-ol[type|compact],-ul[type|compact],-li,br,img[longdesc|usemap|" + "em/i,"
+ "src|border|alt=|title|hspace|vspace|width|height|align],-sub,-sup," + "strike,"
+ "-blockquote[cite],-table[border=0|cellspacing|cellpadding|width|frame|rules|" + "u,"
+ "height|align|summary|bgcolor|background|bordercolor],-tr[rowspan|width|" + "#p,"
+ "height|align|valign|bgcolor|background|bordercolor],tbody,thead,tfoot," + "-ol[type|compact],"
+ "#td[colspan|rowspan|width|height|align|valign|bgcolor|background|bordercolor" + "-ul[type|compact],"
+ "|scope],#th[colspan|rowspan|width|height|align|valign|scope],caption,-div," + "-li,"
+ "-span,-code,-pre,address,-h1,-h2,-h3,-h4,-h5,-h6,hr[size|noshade],-font[face" + "br,"
+ "|size|color],dd,dl,dt,cite,abbr,acronym,del[datetime|cite],ins[datetime|cite]," + "img[longdesc|usemap|src|border|alt=|title|hspace|vspace|width|height|align],"
+ "object[classid|width|height|codebase|type],param[name|value|_value]," + "-sub,-sup,"
+ "map[name],area[shape|coords|href|alt|target],bdo," + "-blockquote[cite],"
+ "button,col[align|char|charoff|span|valign|width],colgroup[align|char|charoff|span|" + "-table[border=0|cellspacing|cellpadding|width|frame|rules|height|align|summary|bgcolor|background|bordercolor],"
+ "valign|width],dfn,fieldset," + "-tr[rowspan|width|height|align|valign|bgcolor|background|bordercolor],"
+ "kbd,label[for],legend,optgroup[label|disabled],option[disabled|label|selected|value]," + "tbody,thead,tfoot,"
+ "q[cite],samp,select[disabled|multiple|name|size],small," + "#td[colspan|rowspan|width|height|align|valign|bgcolor|background|bordercolor|scope],"
+ "textarea[cols|rows|disabled|name|readonly],tt,var,big" + "#th[colspan|rowspan|width|height|align|valign|scope],"
+ "caption,"
+ "-div,"
+ "-span,"
+ "-code,"
+ "-pre,"
+ "address,"
+ "-h1,-h2,-h3,-h4,-h5,-h6,"
+ "hr[size|noshade],"
+ "-font[face|size|color],"
+ "dd,dl,dt,"
+ "cite,"
+ "abbr,"
+ "acronym,"
+ "del[datetime|cite],ins[datetime|cite],"
+ "bdo,"
+ "col[align|char|charoff|span|valign|width],colgroup[align|char|charoff|span|valign|width],"
+ "dfn,"
+ "kbd,"
+ "label[for],"
+ "legend,"
+ "q[cite],"
+ "samp,"
+ "var,"
}); });
tinyMCE.execCommand("mceAddEditor", true, "tinymce"); tinyMCE.execCommand("mceAddEditor", true, "tinymce");
</script> </script>