Feature: #104220 - Make parseFunc allowTags and denyTags optional
See forge#104220
Description
Defining the TypoScript properties
allow or
deny for the HTML processing via
std is now optional.
Besides that, it is now possible to use
allow.
Impact
By omitting
allow or
deny, the
corresponding rendering instructions can be simplified.
Security aspects are considered automatically by the HTML sanitizer,
unless
html is disabled explicitly.
Examples
10 = TEXT
10.value = <p><em>Example</em> <u>underlined</u> text</p>
10.parseFunc = 1
10.parseFunc {
allowTags = *
denyTags = u
}
The example above allows any tag, except
<u> which will be encoded.
10 = TEXT
10.value = <p><em>Example</em> <u>underlined</u> text</p>
10.parseFunc = 1
10.parseFunc {
allowTags = u
}
The example above only allows
<u> and encodes any other tag.
10 = TEXT
10.value = <p><em>Example</em> <u>underlined</u> text</p>
10.parseFunc = 1
10.parseFunc {
allowTags = *
denyTags = *
}
The example above allows all tags, the new
allow
takes precedence over
deny.