We are migrating CKEditor issue tracking to GitHub. Please, use GitHub to report any new issues.

The former tracking system (this website) will still be available in the read-only mode. All issues reported in the past will still be available publicly and can be referenced.

Important: we decided not to transfer all the tickets to GitHub, as many of them are not reproducible anymore or simply no longer requested by the community.
If the issue you are interested in, can be still reproduced in the latest version of CKEditor, feel free to report it again on GitHub.
At the same time please note that issues reported on this website are still taken into consideration when picking up candidates for next milestones.

To report a new issue, go to https://github.com/ckeditor/ckeditor-dev/issues and follow the instructions in the issue template.

Context Navigation

← Previous Ticket
Next Ticket →

Opened 11 years ago

Closed 11 years ago

#11635 closed Bug (fixed)

Correct attributes protection

Reported by:	Wiktor Walc	Owned by:	Piotrek Koszuliński
Priority:	Normal	Milestone:	CKEditor 4.3.4
Component:	General	Version:	4.0
Keywords:		Cc:

Description

Some HTML attributes (onXYZ) in some tags (eg. video and audio) are not correctly protected when run through htmldataprocessor.js.

Change History (5)

comment:1 Changed 11 years ago by Wiktor Walc

Status:	new → confirmed

comment:2 Changed 11 years ago by Piotrek Koszuliński

Owner:	set to Piotrek Koszuliński
Status:	confirmed → assigned

comment:3 Changed 11 years ago by Piotrek Koszuliński

Status:	assigned → review

Pushed branch:t/11635 on dev and tests.

comment:4 Changed 11 years ago by Frederico Caldeira Knabben

Status:	review → review_passed

comment:5 Changed 11 years ago by Piotrek Koszuliński

Resolution:	→ fixed
Status:	review_passed → closed

Fixed on master with git:1b9a322 on dev and 9ef7bd4 on tests.

Note: See TracTickets for help on using tickets.

Download in other formats: