Bug #94804: Handle deprecated/legacy HTML markup - TYPO3 Core - TYPO3 Forge

Actions

Bug #94804

closed

Bug #94787: Tracking issue related to HTML sanitization issues

Status:

Closed

Priority:

Should have

Assignee:

Category:

Security

Target version:

Start date:

2021-08-11

Due date:

% Done:

Estimated time:

TYPO3 Version:

PHP Version:

Tags:

Complexity:

Is Regression:

Sprint Focus:

Description

Deprecated/legacy HTML5 markup directly produced by CKEditor shall be handled correctly in HTML sanitizer. Examples:

(reported by Christian Toffolo in #94787 and exctracted to this issue)

<table align="left" border="2" cellpadding="10" cellspacing="10" style="width:100%">

transformed to

<table style="width:100%">

Actions

Actions

For <table> attributes (extracted from debug logging)

Found invalid attribute table.summary - {"behavior":"default","nodeName":"table","attrName":"summary"}
Found invalid attribute table.cellspacing - {"behavior":"default","nodeName":"table","attrName":"cellspacing"}
Found invalid attribute table.cellpadding - {"behavior":"default","nodeName":"table","attrName":"cellpadding"}
Found invalid attribute table.border - {"behavior":"default","nodeName":"table","attrName":"border"}
Found invalid attribute table.align - {"behavior":"default","nodeName":"table","attrName":"align"}

Actions