From 64e1a769874071eb9163c9dccd5749d03d0e6e9c Mon Sep 17 00:00:00 2001 From: Jermolene Date: Tue, 10 Mar 2015 12:34:50 +0000 Subject: [PATCH] Prevent edit-text widget from generating unsafe elements --- core/modules/widgets/edit-text.js | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/core/modules/widgets/edit-text.js b/core/modules/widgets/edit-text.js index c2c5bd74a..835e0ce9d 100644 --- a/core/modules/widgets/edit-text.js +++ b/core/modules/widgets/edit-text.js @@ -37,8 +37,12 @@ EditTextWidget.prototype.render = function(parent,nextSibling) { // Execute our logic this.execute(); // Create our element - var editInfo = this.getEditInfo(); - var domNode = this.document.createElement(this.editTag); + var editInfo = this.getEditInfo(), + tag = this.editTag; + if($tw.config.htmlUnsafeElements.indexOf(tag) !== -1) { + tag = "input"; + } + var domNode = this.document.createElement(tag); if(this.editType) { domNode.setAttribute("type",this.editType); }