Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add warning to html sanitizer #1143

Merged
merged 1 commit into from
Oct 18, 2023
Merged

Add warning to html sanitizer #1143

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 5 additions & 1 deletion guides/hosting/configurations/shopware/html-sanitizer.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13,7 +13,7 @@ This feature has been introduced with Shopware version 6.5. This is exclusively

## Overview

HTML sanitizer improves security, reliability and usability of the text editor by removing potentially unsafe or malicious HTML code. It also sanitizes styles and attributes for consistent and correct code rendering regardless of platform and browser. For example, if the `<img>` tag is added, it is automatically removed by the editor after a few seconds and an additional notice appears that some of your inputs have been sanitized.
HTML sanitizer improves security, reliability and usability of the text editor by removing potentially unsafe or malicious HTML code. It also sanitizes styles and attributes for consistent and correct code rendering regardless of platform and browser. For example, if the `<img>` tag is added, it is automatically removed by the editor after a few seconds and an additional notice appears that some of your inputs have been sanitized.

## Configuration

Expand All @@ -30,3 +30,7 @@ In this example, the `<img>` tag, as well as the CSS attributes `src`, `alt` and
If you want to deactivate the sanitizer despite security risks, you can also do this in the `z-shopware.yaml` using the following code:

<<< @/docs/snippets/config/html_sanitizer_disabled.yaml

::: warning
Disabling the HTML sanitizer will allow potentially unsafe or malicious HTML code to be inserted.
:::
Loading