ISUITC
Michael Hofmockel
https://github.com/ISUITS/luggage_ckeditor
A conservative implementation of the ckeditor in Drupal 7.
Text formats: Wywiwyg - admin/config/content/formats/wysiwyg
- Allowed by authenticated Filtered html - admin/config/content/formats/filtered_html
- Disallowed by all
- This text format is installed with the standard profile and is highly abused so I have encluded it so it is reset and unused. Full html - admin/config/content/formats/full_html
- Disallowed by all
- This text format is installed with the standard profile and is highly abused so I have encluded it so it is reset and unused.
ckeditor config changes:
- The ckeditor config can not be changed without altering the config file in so hacking the module. Would like the module developers to provide a way to override without hacking core.
- I have altered the config to remove the "url" field from the image properties dialog so that users can not include images from othe domains.
- The only way to include an image is to use the insert module.
- I have also removed the image properties advanced dialogue tab as I do not want users to had classes or ID ...
- Users can not escape from the ckeditor and edit source.
- The plugins directory was cleared of all pluggins except Drupal-Break and confighelper
Principles:
Security
- Users need to be locked into uploading images through a Drupal field and unable to create img tags that point outside the host domain.
- Tags and tag attributes are highly limited
Simple
- simplier is easier to use.
ckeditor drupal module with adjusted config file and plugins
luggage_ckeditor Drupal feature
Commandline where DRUPAL_ROOT is the root of your Drupal site:
cd DRUPAL_ROOT/sites/all/modules
git clone https://github.com/ISUITC/luggage_ckeditor.git
cd DRUPAL_ROOT/sites/all/libraries
git clone https://github.com/ckeditor/ckeditor-releases.git -b 4.2.x/full ckeditor
drush en ckeditor_config
- better_formats
- ckeditor - included as the config and plugins directory have been modified
- features
- image - core
- image_resize_filter
- insert
- wysiwyg_filter