Commit
- Loading branch information
There are no files selected for viewing
3 comments
on commit e957bfe
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
If that doesn't enable the editor the yet existing plugin hook for 'message_compose_body' doesn't do it either which is a bug.
And yes, cleaning HTML would be required here. I think best is to do that right after rcube_utils::request2param() in compose.inc
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Hmm, it actually should change editor settings because further down in that function we have $HTML_MODE = $isHtml;
which controls the HTML editor.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Fixed in 2af3748
Well, I suppose this does not change editor settings, so if editor is disabled but 'html' param enabled user will still see plain text editor. Second, I'm not sure, but I think we should clean up HTML content for security, as these params might be provided in URL.