Opened 14 years ago
Closed 11 years ago
#7826 closed Bug (duplicate)
Source protection dosen't work for textarea tag
Reported by: | maza | Owned by: | |
---|---|---|---|
Priority: | Normal | Milestone: | |
Component: | Core : Output Data | Version: | 3.5.2 |
Keywords: | Cc: | spotlighter@… |
Description (last modified by )
Set in config.js config.protectedSource.push( /<\?[\s\S]*?\?>/g ); // PHP code
If You use this code:
<textarea name="f[desc2]" cols="45" rows="10"><?php echo $oFormat->htmlToEnt($_POST['f']['desc2'], false); ?></textarea>
{cke_protected_x} dosen't apper in HTML mode. Source view shows:
<textarea cols="45" name="f[desc2]" rows="10"><!--{cke_protected}%3C%3Fphp%20echo%20%24oFormat-%3EhtmlToEnt(%24_POST%5B'f'%5D%5B'desc2'%5D%2C%20false)%3B%20%3F%3E--></textarea>
Change History (6)
comment:1 Changed 14 years ago by
Cc: | spotlighter@… added |
---|
comment:2 Changed 14 years ago by
Keywords: | source protection textarea removed |
---|---|
Status: | new → confirmed |
Version: | 3.5.3 → 3.5.2 |
comment:3 Changed 12 years ago by
Description: | modified (diff) |
---|
comment:6 Changed 11 years ago by
Resolution: | → duplicate |
---|---|
Status: | confirmed → closed |
Patch for #9205 indeed didn't fix this problem, because it's a different kind of issue - it has the same nature as #11223. I'm closing it as DUP - it will be fixed in #11223. Although, the fix will be about stop protecting source inside <textarea>
, because there's no other solution - <textarea>
cannot contain comments inside it.
Works fine in HTML attributes, tags like form, p or span but it doesn't work inside textarea.
I have set 3.5.2 version because according to #4475 this is where attributes were fixed.