Hi all

I would like to allow my users the chance to format some HTML in text fields using something such CKEditor. Students must provide me with a r=E9sum=E9 that we share with faculty and I would like it to look better than just simple text, hence the desire to allow formatted HTML.

I understand (barely) that this would open us up to a cross-site scripting vulnerability, where any user can arbitrarily add javascript to the r=E9sum=E9 page via CKEditor. To protect our site, I am told I need server-side sanitization of HTML. Can Lasso (currently v 8.5.6, soon to move to 8.6) handle this? Is there a better web-based HTML editor than CKEditor?

Any advice will be appreciated. I can always not use CKEditor, but I do want things looking better.

Thank you.

Stan
||||||||||||||||||||||||||||||||||||||||||
Stanley S. Weber, Pharm.D., FASHP, BCPP
Associate Dean for Professional Pharmacy Education
University of Washington
South Campus Center, Suite 244
1601 NE Columbia Road, Box 357631
Seattle, Washington 98195

weberst@uw.edu
(206) 616-8762 (voice)
(206) 221-2689 (fax)

#############################################################
This message is sent to you because you are subscribed to
the mailing list Lasso
Lasso@lists.lassosoft.com
To unsubscribe, E-mail to: <Lasso-unsubscribe@lists.lassosoft.com>
Send administrative queries to <Lasso-request@lists.lassosoft.com>