Configure HTML sanitizer

You must modify a script include to make configuration changes to the HTML sanitizer.

1. Navigate to System Definition > Script Includes.
2. Open HTMLSanitizerConfig.
3. To add items to the black list, use the HTML_BLACKLIST class. To add items to the white list, use the HTML_WHITELIST class.

   Use this format:

   HTML_XXXXLIST :{
           globalAttributes :{ 
    
               attribute:[attribute-name1,...],
               attributeValuePattern:{ attribute-name2:attribute-value-regex-pattern,...}
    
           },<html-element-name>:{// Same as Above},----}

   • globalAttributes contains attribute or attributeValuePattern items that are applicable globally for all the HTML elements.
   • attribute is a comma-separated list of attributes.
   • attributeValuePattern is a dictionary of attribute to attribute-value-regex-pattern pairs. The attribute-value-regex-pattern is a regular expression which has to match the attribute value.

HTML_WHITELIST:{
        globalAttributes:{
            attribute:["id","name"],},
        img:{
            attribute:["style","align"],
            attributeValuePattern:{src:".*jpeg"}}, 
        iframe:{},}