TYPO3CMS-Reference-CoreApi icon indicating copy to clipboard operation
TYPO3CMS-Reference-CoreApi copied to clipboard

Note for Security "Content Elements" has vague notice "outdated" without further information

Open sypets opened this issue 2 years ago • 1 comments

The information on this page is outdated!

https://docs.typo3.org/m/typo3/reference-coreapi/main/en-us/Security/GuidelinesIntegrators/ContentElements.html

What is outdated? How can we fix it?

(I assume the RTE propressing already removes some problematic HTML elements when the ce is saved, but have to check first).

Also, I think we should be much more clear about what is recommend and what is not in simple short sentences, e.g. a box / note at the top:

Recommended:

* disable the HTML element or at least disable it for non admins
* ...

sypets avatar Mar 14 '23 10:03 sypets

The information is so far outdated as essential RTE configuration is done by yaml files now.
Some of the old options in TSconfig are still available but many are gone and not advised anymore for general configuration.
Some links are here:
https://docs.typo3.org/m/typo3/reference-coreapi/main/en-us/ApiOverview/Rte/RteCkeditorSysext.html and then naturally in the linked document is the important information.

DavidBruchmann avatar Apr 02 '23 19:04 DavidBruchmann