Hello there my friends. Here’s a strange one:
I am writing a simple html editor.
I am using a multirow text box to save to a mysql db.
I noticed that even though I do put tags in my text for bold, italic, header, etc… when it saves to db, somehow the connector strips all these out!
Is this normal?
Yep, it is the expected behavior.
To prevent XSS attacks, connector removes HTML content from the data.
It can be disabled, by using code like next
ConnectorSecurity::$xss = DHX_SECURITY_TRUSTED;