How to disable NeatHTML?

This forum is only for questions or discussions about working with the mojoPortal source code in Visual Studio, obtaining the source code from the repository, developing custom features, etc. If your question is not along these lines this is not the right forum. Please try to post your question in the appropriate forum.

Please do not post questions about design, CSS, or skinning here. Use the Help With Skins Forum for those questions.

This forum is for discussing mojoPortal development

This forum is only for questions or discussions about working with the mojoPortal source code in Visual Studio, obtaining the source code from the repository, developing custom features, etc. If your question is not along these lines this is not the right forum. Please try to post your question in the appropriate forum.

You can monitor commits to the repository from this page. We also recommend developers to subscribe to email notifications in the developer forum as occasionally important things are announced.

Before posting questions here you might want to review the developer documentation.

Do not post questions about design, CSS, or skinning here. Use the Help With Skins Forum for those questions.
This thread is closed to new posts. You must sign in to post in the forums.
6/18/2012 5:58:34 AM
Gravatar
Total Posts 2

How to disable NeatHTML?

Hi,

My name is Chaiwat. I'm Thai from Thailand. English language is not my native language so I'm sorry if I do something impolite.

The existing system are

  • mojoPortal Version 2.3.8.5 MSSQL
  • Operating System Microsoft Windows NT 6.0.6002 Service Pack 2
  • ASP.NET Info v4.0.30319 Running in Full Trust

I need your help following:

  1. I need to disable or remove NeatHTML (cross site script protection) for forum because the copy remote images are broken as img src_NeatHtmlReplace="http://somewebsite.com/E11103076-0.jpg".
  2. I can use remote image in blog module but forum module is not allow.

Many Thanks,

Chaiwat

 

6/18/2012 6:35:05 AM
Gravatar
Total Posts 18439

Re: How to disable NeatHTML?

Hi Chaiwat,

I've just implemented a config setting to allow external images. After the next release of mojoPortal you can add:

<add key="Forum:AllowExternalImages" value="true"/>

to your user.config file.

However, allowing external images to be posted in the forums can potentially be a security risk. Also if you use SSL on your site (which everyone should these days), external images can cause browser warnings about the page containing insecure content.

The Blog module is designed for trusted users that is why it allows any content, you should not let strangers edit the blog because it allows even javascript which can be used for good purposes but also for malicious purposes. The Forums were designed for untrusted users that is why we limit what it can do.

This change is in the source code repository now.

Hope that helps,

Joe

6/19/2012 1:37:23 AM
Gravatar
Total Posts 2

Re: How to disable NeatHTML?

Thanks Joe.

You must sign in to post in the forums. This thread is closed to new posts.