Removed formatting from TinyMCE that use the style tag
authorSverre Rabbelier <srabbelier@gmail.com>
Fri, 20 Mar 2009 21:11:23 +0000
changeset 1960 64fa3cf03b4e
parent 1959 e6644c70e408
child 1961 85a57ba6f6fa
Removed formatting from TinyMCE that use the style tag The style tag is removed by feedparser as it can be used to insert malicious content. Patch by: Sverre Rabbelier
app/soc/views/helper/widgets.py
--- a/app/soc/views/helper/widgets.py	Fri Mar 20 21:02:46 2009 +0000
+++ b/app/soc/views/helper/widgets.py	Fri Mar 20 21:11:23 2009 +0000
@@ -19,6 +19,7 @@
 
 __authors__ = [
   '"Pawel Solyga" <pawel.solyga@gmail.com>',
+  '"Sverre Rabbelier" <sverre@rabbelier.nl>',
   ]
 
 
@@ -78,10 +79,9 @@
     {% endblock %}
   """ 
 
-  features1 = ("bold,italic,underline,strikethrough,|,"
-               "forecolor,backcolor,blockquote,|"
+  features1 = ("bold,italic,underline,strikethrough,blockquote,|,"
               ",justifyleft,justifycenter,justifyright,justifyfull,|,"
-              "fontselect, fontsizeselect,formatselect")
+              "formatselect")
 
   features2 = ("newdocument,|,bullist,numlist,|,outdent,indent,|,undo,redo,|"
       ",link,unlink,anchor,image,cleanup,help,code,hr,removeformat,visualaid,|,"