1 Topic by NinCollin

  • NinCollin
  • Member
  • Offline

Topic: Allow URLS in inline styles when "safe" is set to 1

I'd like to allow to allow URLs to be used when using inline styles (i.e. specifying an external url in the background-image property)

The documentation states "With $config["safe"] = 1, all URLs are disallowed in the style attribute values" but I cannot find a setting that corresponds to this (so that I can re-enable them.)

2 Reply by patnaik

  • patnaik
  • Administrator
  • Offline

Re: Allow URLS in inline styles when "safe" is set to 1

Thanks for raising this point... looking into it and will post soon.

3 Reply by patnaik

  • patnaik
  • Administrator
  • Offline

Re: Allow URLS in inline styles when "safe" is set to 1

Sorry about the delay in getting back on this. You can try one of these options:

(1) Set $config['style_pass'] to 1. All style attribute values in the input text will be permitted through.

(2) Set $config['schemes'] to include 'style'. E.g., " ... ; style=http, https; ... ."