Quote:
Originally Posted by carsafety  Sorry, I didn't mean the vb editor.
What I meant was that if I set "Allow HTML in Product Fields" to yes, then the tiny WYSIWYG editor for the product descriptions works as intended for the formatting. It essentially fixes the bug I was reporting. Presumably this is because the tiny editor adds html tags, rather than bbcode, I guess.
My question was regarding the extent of the security issue mention in the description for the setting "Allow HTML in Product Fields" to yes. Does that only affect usergroups that have "Upload Ads" or "Edit Products" set to yes in the usergroup editor? If I only allow moderators to upload/edit products, would there be a way for a user who cannot upload Ads or edit products to exploit this? |
Still fighting with getting better formatting into a reviewpost product upload. Turns out the html option was not what allowed my "fix" to work, so I've set it back to "No" for now.
I now believe what allowed the tiny editor to work was that I had created a review in a regular forum using the normal
vB editor in order to save my test review separately. I saved/posted it as you normally would in the
vB editor. This post had bold, underline, italics, list bullets, etc. While viewing the posted version (not from the
vB editor pane), I selected and copied the whole post. I then pasted into the advanced tiny editor in the reviewpost upload description.
Upon clicking submit changes, this seems to retain the format correctly. You can even edit from within the tiny editor (I'm using the advanced one because it offers a bigger window) and any formatting you add will also display correctly. Weird!
If I manually create content within the tiny editor that has the same formatting, then the formatting is generally lost once you click submit and view the reviewpost. The one exception seems to be underline.
What is the difference? I don't really know, but I do notice this:
In the reviewpost that is copied/pasted, if I click in an area where I had set up a bullet point list, the path is shown as "Path: div.content » blockquote.postcontent restore » ul » li"
In the reviewpost where I created the formatting within the tiny editor, if I click a list the path is shown as "Path: ul » li"
This seems real wonky to me but maybe it makes sense to someone out there. I realize the tiny editor is from a third party, but I now think that there could be an easy fix that would just allow the tiny editors to work correctly. I don't mind having moderators create their reviews in a regular forum post, but it is an extra step.