I've allowed for @[class] and then in class patterns defined a pattern "wysiwyg*". All classes, including those that begin with "wysiwyg", are stripped.

More importantly, I don't even want to restrict user input on classes for this particular situation. I'm curious to know the reason behind forcing us to provide specific patterns beginning with a known piece of text rather than just provide our own regular expression or choose not to validate at all.

Comments

davidfells81@gmail.com’s picture

Status: Active » Closed (cannot reproduce)

This turned out to be an oversight on my part, leaving out a single comma in the definitions of the allowed tags section. A syntax validation message would be useful, since it seems there's already some introspection on the contents of that box that generates various notices (like unconfigured class values, etc)