samvera
Execute some html in description field
Descriptive summary
Sufia 6 allowed too much but Sufia 7 allows nothing. My users want at least italics so they can, e.g., reference book titles.
I believe this is now available, from https://github.com/projecthydra/sufia/commit/11521027aa85843f26dd880f397143797be0d28f
Hm, that allows links but I need maybe <cite> and <br>. It might be nice to have a configurable whitelist?
@hackmastera oh, shoot, I misread this. Sorry to have closed it prematurely.
I'll move this issue to Hyrax. What would a starting default whitelist look like? a, cite, and br? Toss a list at me and I'll make sure it's carried over.
@mjgiarlo Also p. I think that's all we have. Thanks!!
Description metadata field should render limited HTML. Whitelist of tags:
<a><cite><br><p><em>
Thanks, @hackmastera
Are there any HTML attributes we want to whitelist? We wouldn't want to allow onclick="stealMyCookies()", but we might want href="http://example.com/"
Be great if there were some library out there that could do this for us.
See, e.g.: https://github.com/curationexperts/laevigata/blob/27ad4e0faddde4b3f4a27f629db5063d26e6f920/lib/input_sanitizer.rb
In SMIG, we discussed this is of mid-level interest. There is basic HTML support in the Collection's description field, e.g. italics. Something similar could be appropriate. For example, one might want to ability to cite scholarship and italicize a journal name or book title.
