Custom HTML Code Management In Joomla!
Starting with version 1.5.8, as a security measure a default filtering rule for custom code content was implemented to prevent possible XSS attacks. As a consequence, if you are using certain HTML tags or JavaScript code into the published articles, the resulting browser output could not be always the expected result because of the default Blacklist filter. (related article: Security Release: Joomla! 1.5.9 Is Ready For Free Download)
The default installation of a Joomla! content management system includes a filter called Blacklist which contains a series of tags that will be automatically deleted when occur in an article. This filter is not enabled for the Super Administrator users group. Other two types of filters (White List and No HTML) can be applied from the Parameters area accessible through the Article Manager window. The details about the filters setup and description are available on the official website.
In conclusion, even you turn off the default WYSIWYG (What You See Is What You Get) editor in order to maintain the natural code formatting, the enabled filtering options must be checked if a certain HTML or JavaScript code is not interpreted correctly and the resulting web page is rendered with errors.
If you want to add any types of code, like PHP or CSS in articles even with the WYSIWYG editor enabled, Sourcerer (module and plugin) is a suitable choice. In this way, you will be able to correctly integrate the desired custom code in Joomla! Articles, modules, components and other content type.
Related Articles
