Forum OpenACS Q&A: Change in photo-album HTML displaying behaviour?

I have recently upgraded to OACS 5 and notice that user entered HTML for "Album story" is now being displayed as plain text, rather than HTML. I presume this is due to some sort of change in the templating system?

It seems that there is now the worst of both worlds here as any carriage returns are ignored resulting in now way to create more than one paragraph for the story.

Can anyone explain to me where I would look to try to modify this behaviour? Ideally a user would have the choice of text or html as they do in many other packages.

Collapse
Posted by Don Baccus on
This is due to the HTML-quoting change made to the templating system, I'm sure.  You can fix it for yourself by simply adding ";noquote" to the @tcl_var@ construct that displays the album story.

This is dangerous, though, unless the Tcl script that allows the user to enter the story checks for legal HTML tags first.

Your last comment outlines the best approach - change it to use the templating system's richtext widget (which allows for text or html, safely, too).

Collapse
Posted by James Harris on
You're right Don, adding ;noquote "fixes" the behaviour.  It's only myself and one of my friends who can create albums on my site, so the security implications aren't too problematic in the short term.