|
|
Rank: Newbie
Groups: Member
Joined: 2/8/2016
Posts: 1
|
The EO.web control is removing onclick code, so this :
<button onclick="verifyRequired()">Contact me</button>
becomes this
<button>Contact me</button>
|
|
Rank: Administration
Groups: Administration
Joined: 5/27/2007
Posts: 24,229
|
Hi,
We have looked into this. This behavior is by design for security reasons. The Editor will automatically filter out any script element or inline JavaScript to avoid script injection. Otherwise an unsuspecting site author can easily fall prey of an experienced user trying to embed JavaScript code into his page when the contents is displayed back and this can present a major security risk for the site that uses the Editor control.
Thanks!
|
|
Rank: Newbie
Groups: Member
Joined: 2/8/2016
Posts: 1
|
This is being used as an internal program, for operations people to build web pages. This is never exposed to the outside world. They need to have the ability to add code like this when necessary. You should add a setting to allow this to be used. Not everything is open to the WWW.
|
|
Rank: Administration
Groups: Administration
Joined: 5/27/2007
Posts: 24,229
|
Thank you very much for your feedback. Currently we have no plan to add such options due to the fact that this is the first time this feature has been requested --- as you will understand, it is not practical for us to add a new feature every time it is requested. If we were to do that, then the product will quickly become unmanageable. If we hear a lot of demand for this feature, then we may revisit this issue again.
|
|