I whitelisted img[title]. Now, having an article containing Only local images are allowed., the value of the title attribute is stripped to " d" (so everything from the first character until the last colon seems to be stripped).

I could not see how to configure this, so I think it's a bug.

Comments

Peter Thomassen’s picture

Peter Thomassen commented

Ah, the img tag that I wrote above was stripped by the bugtracker. Here it is again, having < replaced by [:

I whitelisted img[title]. Now, having an article containing [img src="..." title="a: b, c: d"/], the value of the title attribute is stripped to " d" (so everything from the first character until the last colon seems to be stripped).

I could not see how to configure this, so I think it's a bug.

pschopf’s picture

pschopf commented

I am having the same problem. I was adding a title like "Great image of Something. Source: photographer deserving credit" All that gets out is "photographer deserving credit"

is is possible that wysiwyg_filter_xss_bad_protcol is being run on the title text? It seems that everything in front of the colon is getting clipped.

patrickdepinguin’s picture

patrickdepinguin commented

I have seen the same behavior without the WYSIWYG editor, and have created a new bug report for the core system here:
http://drupal.org/node/952964

markus_petrux’s picture

markus_petrux commented
Category: bug » feature
Status: Active » Postponed (maintainer needs more info)

From my point of view, this feature works as designed, which is the same behavior as Drupal core itself. If it needs to be changed, then this is a feature request. Well, the bug could be in my mind, but I coded this module as if I was adding stuff to the Drupal core filter. The cause of this behavior is the "bad protocols" filtering (anything to the left of a colon should exist in a white list).

@patrickdepinguin: Thanks for chiming in and for opening that issue in the Drupal core queue. I'm interested to see what Drupal maintainers have to say before this behavior is changed here.

istryker’s picture

istryker commented
Status: Postponed (maintainer needs more info) » Closed (duplicate)

This is a core bug. Its been over 2 1/2 years. Marking this duplicate of #952964: String stripped from title and alt attribute if contains a colon