RTE is stipping off the <form> tag in raw html. | Community
Skip to main content
Umesh_Thakur
Community Advisor
Community Advisor
June 18, 2020
Solved

RTE is stipping off the <form> tag in raw html.

  • June 18, 2020
  • 2 replies
  • 1196 views

Dera Members,

I have authored one row html in a dialog which is having <form> tag, but when we submit it, RTE actually striping off the form tag. like 

it converts 

<form method=“POST” action=“https://abc.com”>
                <input type =“hidden” name = “name” value = “xyz===="/>
    <input type=“submit” value=“Click here” />
</form>

 

to 

<input type="hidden" name="name" value="xyz===">

<input type="submit" value="Click here ">

 

I don know what can be solution of it, if any one is having any idea, please respond.

Thanks

Umesh Thakur 

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Best answer by leoberliant
What's stripping the custom tags is XSS filter [0], which is based on OWASP AntiSamy. You can find and customize the configuration for it under /libs/cq/xssprotection/config.xml. There you can add rules to allow your custom tag.
Also, check if this article helps [1]
 
[0]
[1]

2 replies

leoberliantAdobe EmployeeAccepted solution
Adobe Employee
June 18, 2020
What's stripping the custom tags is XSS filter [0], which is based on OWASP AntiSamy. You can find and customize the configuration for it under /libs/cq/xssprotection/config.xml. There you can add rules to allow your custom tag.
Also, check if this article helps [1]
 
[0]
[1]
sravs
Community Advisor
Community Advisor
July 28, 2021

Hi @umesh_thakur ,

 

Can you please explain What are the configurations you have done to resolve this issue. As I can see the form tag is already valid tag in xssprotection.xml.