CKeditor rich text editor displaying html tags in browser

后端 未结 3 2059
小蘑菇
小蘑菇 2021-01-25 15:28

I\'ve just installed CKeditor rich text WYSIWYG editor on a site I\'m building and it seems to be working ok except for the fact that it inserts text into my mysql database as e

相关标签:
3条回答
  • 2021-01-25 15:54

    Modern templating languages tend to autoescape html input. For example, in DTL it would be displayed correctly in the template by simply using {{ object.field_name|safe }} This is a desired action, since user input is considered untrusted and may be considered malicious.

    0 讨论(0)
  • 2021-01-25 16:13

    The browser is not parsing HTML, so on the page displaying (or in the php file) try using {! !} instead of {{ }}.

    0 讨论(0)
  • 2021-01-25 16:14

    If you don't want CKEditor to create paragraphs for you, set config.autoParagraph to false. Additionally you may want to change enter key behaviour with config.enterMode set to CKEDITOR.ENTER_BR.

    And regarding disappearing styles...


    EDIT: OK, it seems I missed your point.

    So your website is displaying HTML markup instead of HTML while rendering out what you typed? Then the problem is your server side rather than CKEditor. You can verify in your console that CKEDITOR.instances.yourInstance.getData() yields the correct, unescaped HTML:

    <p>This is text</p> // Right!
    

    If it is so, and I strongly believe it is, CKEditor's just fine and this is your server app that is converting special chars into entities (i.e. like PHP htmlspecialchars) while saving to database. You didn't mention what kind of framework/language you use there, so I can just tell you that it is to secure user input to prevent cross-site scripting, breaking layouts etc. and all popular frameworks allow you to disable that feature for a particular field. Simply refer to documentation.

    0 讨论(0)
提交回复
热议问题