Uploaded image for project: 'OpenOLAT'
  1. OpenOLAT
  2. OO-679

Remove movie buttons in blog editor as movies are not allowed to be embedded by the XSS filter

    XMLWordPrintable

    Details

      Description

      How to reproduce

      • Create a blog
      • In the description or content, embed a movie
        => movie is removed from view

      The problem is that the XSS filter removes this tags as they contain JavaScript to load the movie. This is a security issue.

      Allowing movies would be possible but not with the current editor concept. Thus, we remove the movie upload to not confuse users.

        Attachments

          Activity

            People

            • Assignee:
              gnaegi Florian Gnägi
              Reporter:
              gnaegi Florian Gnägi
              Tester:
              Joël Krähemann
            • Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Time Tracking

                Estimated:
                Original Estimate - 1 hour
                1h
                Remaining:
                Remaining Estimate - 0 minutes
                0m
                Logged:
                Time Spent - 50 minutes Time Not Required
                50m