Page tree

Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

HTML TAG


If you set "editor.contentFilter.allowIframe" value to false, insertion of <iframe> tag by the user is restricted and the tag is automatically removed.

Code Block
languagejs
themeEmacs
titlesynapeditor.config.js
{
	'editor.contentFilter.allowIframe': false
}


If you set "editor.contentFilter.allowEmbed" value to false, insertion of <embed> tag by the user is restricted and the tag is automatically removed.

Code Block
languagejs
themeEmacs
titlesynapeditor.config.js
{
	'editor.contentFilter.

...

allowEmbed': false
}


If you set "editor.contentFilter.allowObject" value to false, insertion of <object> tag by the user is restricted and the tag is automatically removed.

Code Block
languagejs
themeEmacs
titlesynapeditor.config.js
{
	'editor.contentFilter.allowIFrameallowObject': false
}

RELEASE 2.3.0 OR ABOVE

Status
colourYellow
titleRELEASE 2.7.0 OR ABOVE
 If you set 'editor.contentFilter.allowLink' value to falseinsertion of <link> tag by the user is restricted and the tag is automatically removed.

Code Block
languagejs
themeEmacs
titlesynapeditor.config.js
{
	'editor.contentFilter.allowLink': false
}

 

 

 


...

HTML SCRIPT & EVENT ATTRIBUTES

Warning
titleCaution

You cannot be held responsible for security issues arising from the use of the option.


If you set "editor.contentFilter.allowIScript' 설정을 false로 설정하면 사용자 script tag 삽입을 제한하여 자동 태그 제거합니다" value to false, insertion of <script> tag by the user is restricted and the tag is automatically removed.

Code Block
languagejs
themeEmacs
titlesynapeditor.config.js
{
	'editor.contentFilter.allowScript': false
}


Status
colourYellow
titleRELEASE 2.7.0 OR ABOVE
 If you set 'editor.contentFilter.allowEventAttribute' value to true, you can use event attributes (onclick, onload, onchange, ....) in HTML tags.

Code Block
languagejs
themeEmacs
titlesynapeditor.config.js
{
	'editor.contentFilter.allowScriptallowEventAttribute': false
}