Support for Drupal 7 is ending on 5 January 2025—it’s time to migrate to Drupal 10! Learn about the many benefits of Drupal 10 and find migration tools in our resource center.Was using the scrambls browser plugin (which is interesting from a weak privacy perspective, if not a security one) on a dupal commons v2.3 site.
It appears that the only way to get the 'encryption' to work on the node edit field is to turn off the WYSIWYG gui, e.g. with Disable Rich Text.
This makes sense I guess, as the editor doesnt really have a chance of rendering the [scrambls}ceKMn5H25 ⊱⋀⊝≑⊹⋧∳⋕−∄☋≥≽{] now, does it.
The encryption has a tendency to destroy any markup quite completely as well. Still, it would be nice to have block(s) of scrambls delimited text ignored by the WYSIWYG, so that scrambls could do its thing, while the WYSIWYG went to work on the rest.
So you end up with a nicely formatted page with e.g. para and line breaks, with some gibberish where it has been scrambled.
Tested in both Firefox 16.0.1 and Chrome 22.0.1229.94 m
Comments
Comment #1
TwoDI've not looked into how scrambls works, but I suppose you could create a cross-editor plugin (look at wysiwyg.api.php and our Teaser Break plugin for examples) to pre-/post-process the content in WYSIWYG mode. The blocks could be replaced by something else, like a placeholder image, for WYSIWYG mode which gets replaced by the scrambled text when the editor is detached or the form submitted. If the scrambled contents can't be stored as part of the image itself, perhaps it would be enough to store a lookup id/hash of it in an attribute and look it up from a table when putting it back in there.
That would not let you edit the scrambled contents inside the editor, but it would preserve it during WYSIWYG mode.
Comment #2
mysty CreditAttribution: mysty commentedVery encouraging that you can already describe some options for this to work. Thanks for the response.
One of the reasons I wanted to post is in case others were looking for scrambls on d.o.
Maybe in time scrambls' success (or otherwise) will drive such an approach. Its originators, Wave Systems have a fair bit of clout on the security side of things, with TPM etc. so time - and their marketing effort - will tell.
Comment #3
TwoDI'm closing this since it's not likely we'll integrate it directly in Wysiwyg module, another contrib module could probably stay more up to date with the scrambls APIs and focus on doing just that task right.
Thanks for posting this, I wouldn't have known about this service at all hadn't you done so.