[rt-users] Search format changed after upgrade

Thomas Sibley trs at bestpractical.com
Tue Nov 13 13:10:02 EST 2012


On 11/12/2012 03:26 PM, Leo Gorauskas wrote:
> How can I add a class or ID to an element within a search format?

You'll need to adjust the allowed HTML attributes, but be aware of the
potential security concerns (faking up transactions and other parts of
the UI in arbitrary messages).  Put the following in
local/lib/RT/Interface/Web_Local.pm:

    package HTML::Mason::Commands;
    our %SCRUBBER_ALLOWED_ATTRIBUTES;
    $SCRUBBER_ALLOWED_ATTRIBUTES{'id'}    = 1;
    $SCRUBBER_ALLOWED_ATTRIBUTES{'class'} = 1;
    1;

Then clear the mason cache and restart RT.



More information about the rt-users mailing list