tracker issue : CF-3740381

select a category, or use search below
(searches all categories and all time range)
Title:

Modify default antisamy policy file

| View in Tracker

Status/Resolution/Reason: Closed/Fixed/

Reporter/Name(from Bugbase): Raymond Camden / Raymond Camden (Raymond Camden)

Created: 04/10/2014

Components: Security

Versions: 11.0

Failure Type: Cosmetic Issue

Found In Build/Fixed In Build: PublicBeta /

Priority/Frequency: Minor / Some users will encounter

Locale/System: English / Platforms All

Vote Count: 0

The default antisamy policy file has <directive name="formatOutput" value="true"/> which can break HTML. So for example, if I use:

I like <b>pie</b>.

Then the policy file will return

I like <b>pie</b>
.

which will cause a space in the rendered output. By setting formatOutput to false, this does not happen. I blogged about this here: http://www.raymondcamden.com/index.cfm/2014/4/9/getSafeHTML-and-ColdFusion-11

----------------------------- Additional Watson Details -----------------------------

Watson Bug ID:	3740381

External Customer Info:
External Company:  
External Customer Name: cfjedimaster
External Customer Email:  
External Test Config: My Hardware and Environment details:

Attachments:

Comments: