Unable to store HTML from Grid sub_row via Datastore/Connect

Suite and Optimus Suite 5
#1

Trying to save html from a grid sub_row fails. All the HTML tags are removed and only text (even without CR) is stored in the DB. Existing HTML entries form DB or newly added entries from a form are represented correctly as HTML.
Any suggestions how to solve that? Thanks in advance.

Karl

See field ‘event_description’

Log started, 20/08/2013 10:08:55

A session had already been started - ignoring session_start() at D:\Documents\nuSphere\apache\htdocs\sdh_coach\cee_dhx\dta\xss_filter.php line 178

DataProcessor object initialized
1376987754635_id => 1376987754635
1376987754635_!nativeeditor_status => inserted
1376987754635_event_title => 1111111111
1376987754635_event_description => 111111111111111111111
1376987754635_event_timestamp => 2013-08-20 10:35:54

ids => 1376987754635

Row data [1376987754635]
id => 1376987754635
!nativeeditor_status => inserted
event_title => 1111111111
event_description => 111111111111111111111
event_timestamp => 2013-08-20 10:35:54

INSERT INTO event(event_description,event_timestamp,event_user_originator,event_title,fk_event_type,fk_event_status,event_filename,fk_event_library_link,event_bookable,event_effort,event_notes,fk_event_contract,fk_staff_id) VALUES (‘111111111111111111111’,‘2013-08-20 10:35:54’,‘bixe’,‘1111111111’,‘2’,‘3’,‘-’,‘0’,‘N’,‘0.00’,‘-’,‘3’,‘17’)

Edit operation finished
0 => action:inserted; sid:1376987754635; tid:366;

Done in 0.012914180755615s

#2

By default connector removes any html content to prevent XSS attack.
You can change it, just add before connector initialization

//will allow safe subset of html
ConnectorSecurity::$xss = DHX_SECURITY_SAFEHTML;

or

//disables content filtering
ConnectorSecurity::$xss = DHX_SECURITY_TRUSTED;

#3

For more details, check
docs.dhtmlx.com/doku.php?id=dhtm … ipting_xss

#4

Thank’s a lot for your speedy reply, Stanislav: problem solved!

#5

Hello,

I am facing the need to save event details in the scheduler with HTML tags. This seems to be the right solution however I am a bit lost as to where exactly I should insert this code.

Should it be in my main code, my connector .php file or in one of the dhtmlx codebase files?

Kind regards,
Elie

#6

Place it in the connector.php before the render_table|render_sql command.