Edgewall Software
Modify

Opened 7 years ago

Closed 7 years ago

Last modified 7 years ago

#12894 closed defect (wontfix)

video tag sanitization (removal) by the by the html wiki processor

Reported by: sender.trac@… Owned by:
Priority: normal Milestone:
Component: wiki system Version: 1.2.2
Severity: normal Keywords:
Cc: Branch:
Release Notes:
API Changes:
Internal Changes:

Description

I recently migrated a Trac 1.0 installation by Trac 1.2 and observe, that the html wiki processor is now removing video tags. I'm using a html-snippet like https://www.w3schools.com/tags/tag_video.asp, and it is silently removed from the output. This did not happen in the old trac instance. I guess it is due to some sanitization taking place, which didn't happen in previous versions. Still, the html code is very valid, but the wiki pages do not include the videos anymore …

Attachments (0)

Change History (4)

comment:1 by Jun Omae, 7 years ago

No video tag in XHTML 1.0 Strict.

comment:2 by Jun Omae, 7 years ago

Resolution: wontfix
Status: newclosed

comment:3 by Jun Omae, 7 years ago

Trac sanitizes non standard tags and unsafe tags in XHTML1, since 0.11 at least.

Last edited 7 years ago by Jun Omae (previous) (diff)

comment:4 by sender.trac@…, 7 years ago

The MovieMacro is not a solution for me. (This is why I'm using the html processor.)

Enabling render_unsafe_content does indeed resolve the issue. As the Trac instance does not allow edits by untrusted sources, it is a good enough solution for me. Thanks a lot, Jun!

Modify Ticket

Change Properties
Set your email in Preferences
Action
as closed The ticket will remain with no owner.
The resolution will be deleted. Next status will be 'reopened'.
to The owner will be changed from (none) to the specified user.

Add Comment


E-mail address and name can be saved in the Preferences .
 
Note: See TracTickets for help on using tickets.