Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
I am about to let some users publish articles on my site.
To make it easier for them, I was thinking of using a CKeditor, let them have links, images, formating, etc …
However I was thinking of javascript. Can someone inject javascript or will CKeditor clean it up? Do I need my own filtering?
Content submitted by the user should always be checked, even if an application like CKeditor generates valid code. You can use HTMLPurifier for serverside sanitizing.