1 Topic by MaraudeR

  • MaraudeR
  • Member
  • Offline

Topic: Support for 'flashvars' in 'embed'?

Hi there,

I'm writting a new (yet another...) MVC CMS and I've decided to use htmlLawed for filtering user's input.

While I've been able to get youtube videos working and also a reasonable level of security, some videos of other pages does not work. I've found that this is due some attributes of embed element are being removed by htmLawed. There's one called "flashvars" that I think it's the critical one.

I've try setting $spec parameter to things like "embed=*" but it didn't work.

After starting writting this, I've read this other post:

http://www.bioinformatics.org/phplabware/forum/viewtopic.php?pid=188

So, does that mean that I should modify the htmLawed code to permit embed attributes also?

Thanks a lot in advance, :-)

2 Reply by MaraudeR

  • MaraudeR
  • Member
  • Offline

Re: Support for 'flashvars' in 'embed'?

I've modified $aN adding 'flashvars' as follows:

static $aN = array('flashvars'=>array('embed'=>1), 'abbr'=>array('td'=>1, 'th'=>1), ...

I think that's the way, isn't it?

Thanks,

3 Reply by patnaik

  • patnaik
  • Administrator
  • Offline

Re: Support for 'flashvars' in 'embed'?

Yes, you are right.

Note that I will soon have a minor new release of htmLawed which adds support for flashvars.

4 Reply by patnaik

  • patnaik
  • Administrator
  • Offline

Re: Support for 'flashvars' in 'embed'?

Support for 'flashvars' has been added in the new version 1.1.9.1 of htmLawed.