Skip to content

Commit

Permalink
Merge pull request #1143 from shopware/dx-454/add-warning
Browse files Browse the repository at this point in the history
Add warning to html sanitizer
  • Loading branch information
Isengo1989 authored Oct 18, 2023
2 parents dfe0859 + 62e03ca commit 822d2c3
Showing 1 changed file with 5 additions and 1 deletion.
6 changes: 5 additions & 1 deletion guides/hosting/configurations/shopware/html-sanitizer.md
Original file line number Diff line number Diff line change
Expand Up @@ -13,7 +13,7 @@ This feature has been introduced with Shopware version 6.5. This is exclusively

## Overview

HTML sanitizer improves security, reliability and usability of the text editor by removing potentially unsafe or malicious HTML code. It also sanitizes styles and attributes for consistent and correct code rendering regardless of platform and browser. For example, if the `<img>` tag is added, it is automatically removed by the editor after a few seconds and an additional notice appears that some of your inputs have been sanitized.
HTML sanitizer improves security, reliability and usability of the text editor by removing potentially unsafe or malicious HTML code. It also sanitizes styles and attributes for consistent and correct code rendering regardless of platform and browser. For example, if the `<img>` tag is added, it is automatically removed by the editor after a few seconds and an additional notice appears that some of your inputs have been sanitized.

## Configuration

Expand All @@ -30,3 +30,7 @@ In this example, the `<img>` tag, as well as the CSS attributes `src`, `alt` and
If you want to deactivate the sanitizer despite security risks, you can also do this in the `z-shopware.yaml` using the following code:

<<< @/docs/snippets/config/html_sanitizer_disabled.yaml

::: warning
Disabling the HTML sanitizer will allow potentially unsafe or malicious HTML code to be inserted.
:::

0 comments on commit 822d2c3

Please sign in to comment.