[BUGFIX] Allow more tags when no RTE processing is available 49/58749/2
authorBenni Mack <benni@typo3.org>
Sat, 27 Oct 2018 21:28:41 +0000 (23:28 +0200)
committerBenni Mack <benni@typo3.org>
Sun, 28 Oct 2018 11:27:01 +0000 (12:27 +0100)
If somebody has no RTE extension available, there is also no
RTE processing information available, so the default
from RteHtmlParser is used. However, tags like <abbr>
are then not provided by the yaml configuration, so they are
not allowed, and thus - escaped.

The patch adds abbr,acronym and dfn to be allowed all the time.

Resolves: #83424
Releases: master, 8.7
Change-Id: Ifdc0e7f155bef95a7c397584f2cf7b1eab61f6bb
Reviewed-on: https://review.typo3.org/58749
Tested-by: TYPO3com <no-reply@typo3.com>
Reviewed-by: Benni Mack <benni@typo3.org>
Tested-by: Benni Mack <benni@typo3.org>
typo3/sysext/core/Classes/Html/RteHtmlParser.php

index bb6f949..9e02239 100644 (file)
@@ -43,7 +43,7 @@ class RteHtmlParser extends HtmlParser
      * List of all tags that are allowed by default
      * @var string
      */
-    protected $defaultAllowedTagsList = 'b,i,u,a,img,br,div,center,pre,font,hr,sub,sup,p,strong,em,li,ul,ol,blockquote,strike,span';
+    protected $defaultAllowedTagsList = 'b,i,u,a,img,br,div,center,pre,font,hr,sub,sup,p,strong,em,li,ul,ol,blockquote,strike,span,abbr,acronym,dfn';
 
     /**
      * Set this to the pid of the record manipulated by the class.