Preventing IFRAME pasting into TinyMCE via Visual Editor side.

Dave K

Vote:

Hi there,

We are trying to prevent users within our site from pasting in specific code that's copied from one website into our editors on our site via them pasting stuff into the WYSIWYG editor (not the code editor as we have that disabled). This works fine in regards to anything that is in a style tag or any javascript as it looks like TinyMCE already strips that out, but for IFrames it still brings that over.

I'm just wondering how i can go about and remove that ability from all editors?

I have tried using the "invalid_elements" option within the settings of our TinyMCE initialization but it doesn't seem to work as it still allows me to paste in a YouTube video from one site into our site, so not sure if i am missing something or not.

.AddSetting("invalid_elements", "iframe[align<bottom?left?middle?right?top|class|frameborder|height|id"
  + "|longdesc|marginheight|marginwidth|name|scrolling<auto?no?yes|src|style"
  + "|title|width]")

Thanks

#249167

Feb 24, 2021 18:40

Aniket

Vote:

Have you tried valid_children attribute something like below? The "-" removes iframe as a valid child element from the editor.

.AddSetting("valid_children", "-iframe[*]")

.AddSetting("valid_children", "-body[iframe]")

#249168

Edited, Feb 24, 2021 20:15

Dave K

Vote:

Thanks Aniket for you assistance, I did try that but for some reason it still didn't work, not sure why :/

What ended up working though is that i used the same code as before but realizing that I was including attributes which, as the TinyMCE documentation stated, were not permitted for the "invalid_elements" issue.

Redoing the code this way resolved the issue:

.AddSetting("invalid_elements", "iframe")

Cheers

#249193

Feb 24, 2021 23:18