<html dir="ltr">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
</head>
<body ocsi="0" fpstyle="1" style="word-wrap:break-word; color:rgb(0,0,0); font-size:14px; font-family:'Proxima Nova',sans-serif">
<div style="direction: ltr;font-family: Tahoma;color: #000000;font-size: 10pt;">> Did you get a chance to talk about Ckeditor at the last meeting?
<br>
<br>
A little. I don't think there was any solution to the class stripping issue. That said there might be two separate problems.<br>
<br>
I think fisher was having a problem with the wysiwyg_filter module which, if memory serves, was stripping classes that begin with a hyphen. Apparently, "-1class-name" is invalid but "-class-name" is valid and wysiwyg_filter doesn't handle that correctly. There's
an older issue that discusses this a little here and a dated patch.<br>
<a href="https://www.drupal.org/node/835202" target="_blank">https://www.drupal.org/node/835202</a><br>
<br>
htmlpurifier and to a lesser extent htmlawed might be legit alternatives to wysiwyg_filter as they do similar things.<br>
<a href="https://www.drupal.org/project/htmlpurifier" target="_blank">https://www.drupal.org/project/htmlpurifier</a>
<br>
<a href="https://www.drupal.org/project/htmlawed" target="_blank">https://www.drupal.org/project/htmlawed</a>
<br>
<br>
We used purifier in 6 but adopted wysiwyg_filter as the more standard solution in 7. purifier is a lot more complex.<br>
<br>
Ckeditor's ACF filters are a different matter. I think we turn it off as does ODEE based on their UCR code. In our case I think we hit some issues with media. If you wanted to do the same it's under the wysiwyg profile under "cleanup and output". In the same
place you can specify what content is allowed.<br>
<br>
The ACF announcement (<a href="http://ckeditor.com/blog/CKEditor-4.1-RC-Released" target="_blank">http://ckeditor.com/blog/CKEditor-4.1-RC-Released</a>) says it's not security related so I assume they prevent XSS attacks some other way. That said, there are
some usability gains to getting it configured right.<br>
<br>
Incidentally, we keep our text formats and wysiwyg profiles here<br>
<a href="https://code.osu.edu/openosu/osu_text_format" target="_blank">https://code.osu.edu/openosu/osu_text_format</a><br>
<a href="https://code.osu.edu/openosu/osu_wysiwyg" target="_blank">https://code.osu.edu/openosu/osu_wysiwyg</a><br>
<br>
And ODEE has a lot of good code in their group.<br>
<a href="https://code.osu.edu/ocio_odee_web/ocio_wysiwyg" target="_blank">https://code.osu.edu/ocio_odee_web/ocio_wysiwyg</a>
<br>
<br>
WYSIWYG and text format configurations tend to be tightly coupled to site decisions (like media or linkit) so they may not work well out of context.<br>
<br>
Speaking of linkit, it has a security announcement/release for an xss vulnerability today. I know that's a pretty popular one.<br>
<br>
Best,<br>
Jason<br>
<br>
<div style="font-family: Times New Roman; color: #000000; font-size: 16px">
<hr tabindex="-1">
<div style="direction: ltr;" id="divRpF616479"><font face="Tahoma" color="#000000" size="2"><b>From:</b> Drupal [drupal-bounces@lists.osu.edu] on behalf of Hoover, Ellen [hoover.5@osu.edu]<br>
<b>Sent:</b> Tuesday, January 06, 2015 10:59 AM<br>
<b>To:</b> Drupal users list<br>
<b>Subject:</b> Re: [Drupal] drupal meetup today @ 3pm<br>
</font><br>
</div>
<div></div>
<div>
<div>Happy new year all,</div>
<div><br>
</div>
<div>Did you get a chance to talk about Ckeditor at the last meeting? Did anyone find a solution to the class stripping issue?</div>
<div><br>
</div>
<div>Thanks,</div>
<div><br>
</div>
<div>Ellen</div>
<span id="OLK_SRC_BODY_SECTION">
<div dir="ltr">
<div>
<div style="direction:ltr; font-family:Tahoma; color:#000000; font-size:10pt"><b><br>
Open Discussion</b><br>
Possibly apache solr, wysiwyg/ckeditor<br>
Thursday, Dec 18th @ 3pm<br>
Bolz 230 on main campus<br>
<br>
There will be plenty of cupcakes.<br>
<br>
Best,<br>
Jason Little<br>
Engineering<br>
<br>
<div style="font-family:Times New Roman; color:#000000; font-size:16px">
<hr tabindex="-1">
<div id="divRpF174135" style="direction:ltr"><font face="Tahoma" color="#000000" size="2"><b>From:</b> Little, Jason<br>
<b>Sent:</b> Thursday, December 11, 2014 9:13 AM<br>
<b>To:</b> <a href="mailto:drupal@lists.service.ohio-state.edu" target="_blank">drupal@lists.service.ohio-state.edu</a><br>
<b>Subject:</b> drupal meetup | reschedule<br>
</font><br>
</div>
<div></div>
<div>
<div style="direction:ltr; font-family:Tahoma; color:#000000; font-size:10pt">The monthly Drupal meetup would normally be today.
<br>
<br>
However, I didn't get any of our regular main campus rooms booked in time (sorry) and a number of us had a conflict come up.<br>
<br>
So instead, we'll do the meetup next week at the usual time. I've tentatively reserved Bolz 230 on main campus.
<br>
<br>
Open Discussion (probably search and solr too)<br>
Thursday, Dec 18th @ 3pm<br>
Bolz 230 on main campus<br>
<br>
Sorry for the inconvenience and last minute reschedule. I'll bring some holiday snacks next week to make up for it.<br>
<br>
Best,<br>
Jason Little<br>
Engineering<br>
</div>
</div>
</div>
</div>
</div>
</div>
</span><style id="owaParaStyle" type="text/css">
<!--
p
{margin-top:0;
margin-bottom:0}
p
{margin-top:0;
margin-bottom:0}
-->
BODY {direction: ltr;font-family: Tahoma;color: #000000;font-size: 10pt;}P {margin-top:0;margin-bottom:0;}BODY {scrollbar-base-color:undefined;scrollbar-highlight-color:undefined;scrollbar-darkshadow-color:undefined;scrollbar-track-color:undefined;scrollbar-arrow-color:undefined}BODY {scrollbar-base-color:undefined;scrollbar-highlight-color:undefined;scrollbar-darkshadow-color:undefined;scrollbar-track-color:undefined;scrollbar-arrow-color:undefined}BODY {scrollbar-base-color:undefined;scrollbar-highlight-color:undefined;scrollbar-darkshadow-color:undefined;scrollbar-track-color:undefined;scrollbar-arrow-color:undefined}BODY {scrollbar-base-color:undefined;scrollbar-highlight-color:undefined;scrollbar-darkshadow-color:undefined;scrollbar-track-color:undefined;scrollbar-arrow-color:undefined}BODY {scrollbar-base-color:undefined;scrollbar-highlight-color:undefined;scrollbar-darkshadow-color:undefined;scrollbar-track-color:undefined;scrollbar-arrow-color:undefined}BODY {scrollbar-base-color:undefined;scrollbar-highlight-color:undefined;scrollbar-darkshadow-color:undefined;scrollbar-track-color:undefined;scrollbar-arrow-color:undefined}BODY {scrollbar-base-color:undefined;scrollbar-highlight-color:undefined;scrollbar-darkshadow-color:undefined;scrollbar-track-color:undefined;scrollbar-arrow-color:undefined}</style></div>
</div>
</div>
</body>
</html>