Typically, HTML purifier allows all forms of the a attribute, but for some reason it filters out the "file://" protocol, leaving only the surrounding the text. I believe the problem can be fixed by adding it into the one of the "Allowed sections" of the configuration page, though there is no "allowed protocol."

Comments

Ender2’s picture

Ender2 commented
Title: a href="file://" » a href="file://" being filtered out
attheshow’s picture

attheshow commented

subscribing

ezyang’s picture

ezyang commented
Status: Active » Postponed (maintainer needs more info)

Why do you need file:// links? They were consciously left out as a security risk.

Ender2’s picture

Ender2 commented

One of our college departments uses it to map to a video file on a consistently named and mapped network drive. The page that contains the link will likely require authentication.

ezyang’s picture

ezyang commented
Status: Postponed (maintainer needs more info) » Fixed

Fixed in upstream Git, pending new release.

http://repo.or.cz/w/htmlpurifier.git/commit/ec86598446cdf193f866cc018518...

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.