AEM 6 SP2 | Sightly html context

Forum|Forum|10 years ago
October 16, 2015
4 replies
5957 views

Hi All,

I have a sightly expression like

${"Welcome! to " @ context='html'} India - context is 'html'

and it is rendering as

Welcome! to India - without data-id attribute in span tag

expected output

Welcome! to India

But when I change the context to unsafe , same sightly is rendering as expected

${"Welcome! to " @ context='unsafe'} India - context is 'unsafe'

rendered as

Welcome! to India

I do not want to use context as unsafe, how to resolve this?

Thanks,

Radhakrishna N

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.

Best answer by Kunal_Gaba_

The data-id attribute is getting stripped because the antisamy API used by AEM for filtering the HTML does not recognize this attribute. You can overlay the config file from /libs/cq/xssprotection/config.xml to apps as /apps/cq/xssprotection/config.xml and add the new attribute in it as mentioned below to fix this -

<common-attributes> <!-- Add the new attribute inside common-attributes tag --> <attribute name="data-id"> <regexp-list> <regexp name="anything"/> </regexp-list> </attribute> | | | <!--Find tag name="span" and the new attribute defn. --> <tag name="span" action="validate"> <attribute name="data-id"/> </tag>

Kunal_Gaba_Accepted solution

The data-id attribute is getting stripped because the antisamy API used by AEM for filtering the HTML does not recognize this attribute. You can overlay the config file from /libs/cq/xssprotection/config.xml to apps as /apps/cq/xssprotection/config.xml and add the new attribute in it as mentioned below to fix this -

<common-attributes> <!-- Add the new attribute inside common-attributes tag --> <attribute name="data-id"> <regexp-list> <regexp name="anything"/> </regexp-list> </attribute> | | | <!--Find tag name="span" and the new attribute defn. --> <tag name="span" action="validate"> <attribute name="data-id"/> </tag>