TYPO3 Core

I suspected the RteLinkSyntaxUpdater might fail but it works correctly by transforming

<script type="text/javascript">alert(1)</script>
<link attr="value">Content</link>

to

<script type="text/javascript">alert(1)</script>
<a href="t3://page?alias=attr=&quot;value&quot;">Content</a>

Is it possible this happens due to some extension?

Stephan Großberndt wrote:

Did this happen when executing the upgrade wizards? If yes, could you check, which upgrade wizard? Is it possible there are <link ... occurrences in the html code?

I don’t believe it has anything to do with the upgrade wizards since those records I haven’t manually changed yet are still correctly stored in the database but displayed incorrectly in the backend form. Only when I paste HTML into the field and save it, the mentioned replacements and deletions happen. I have not used <link>

Pasting this

<script type="text/javascript" src="/path/to/file.min.js"></script>
<span class="js" style="display:none;">
  <input type="checkbox" name="xyz" id="xyz-ab" checked>
  <label for="xyz-ab"></label>
</span>

was, on saving, turned into

<p> <span class="js" style="display:none;">       </span> </p>

with the paragraph tag not being stored in the database but displayed in the backend form.

In a live case the class “js” got replaced by “cite” which didn’t happen this time.

Stephan Großberndt wrote:

Is it possible this happens due to some extension?

Thanks for this hint. The reason was indeed an extension which provides additional content elements. Deactivating this extension results in the HTML CEs working as they always have been. However, I don’t really see how such extension is able to interfere with other content elements. If I’ll find anything I’ll post it here. And if you have a hint on that, too, I’d be very grateful.