Filter HTML for XSS cant be deaktivated

More
2 years 10 months ago #124590 by StefanBasen
StefanBasen created the topic: Filter HTML for XSS cant be deaktivated
Hello,

well i tried to deaktivate the Filter HTML for XSS because im using some functions in many Questions that used by html. As long as this is on the code wont work. So i tried with the highest Admin Account to deactivate this Filter in the Security Options. But when im Click Save or Save & Close and going into that Security Settings again, the Filter is set back to Activated. So why the Hell does this keep active?

Please i need help on that :(

Thanks

Please Log in or Create an account to join the conversation.

More
2 years 10 months ago #124593 by holch
holch replied the topic: Filter HTML for XSS cant be deaktivated
Where do you host? Self-hosted? LimeSurvey Professional (previously LimeService)? University?

I'm not a LimeSurvey GmbH member. I answer at the LimeSurvey forum in my spare time. No support via private message.
Some helpful links: Manual (EN) | Question Types | Workarounds

Please Log in or Create an account to join the conversation.

More
2 years 10 months ago #124595 by StefanBasen
StefanBasen replied the topic: Filter HTML for XSS cant be deaktivated
Self-Hosted

Please Log in or Create an account to join the conversation.

More
2 years 10 months ago - 2 years 10 months ago #124596 by holch
holch replied the topic: Filter HTML for XSS cant be deaktivated
And which version are you using?
Could you deactivate the filter before or is this the first time you try?

I'm not a LimeSurvey GmbH member. I answer at the LimeSurvey forum in my spare time. No support via private message.
Some helpful links: Manual (EN) | Question Types | Workarounds
Last Edit: 2 years 10 months ago by holch.

Please Log in or Create an account to join the conversation.

More
2 years 10 months ago #124599 by StefanBasen
StefanBasen replied the topic: Filter HTML for XSS cant be deaktivated
Version 2.06+ Build 150619

Yeah i could deactivate it before. We had a Test Survey running for about 3 Weeks now. In this Survey i used html code at some places . The codes does, that the last dropdown menu becomes a checkbox. Everything worked fine and now the Survey was copied for the full live thing. I recognized that the code in those questions was gone and after i reaplied it the Question showed the full html code. Ahh okay Filter thing in Security...tried to turn it off but everytime i save or say save & quit its back on active.

Please Log in or Create an account to join the conversation.

More
2 years 10 months ago #124601 by holch
holch replied the topic: Filter HTML for XSS cant be deaktivated
So you logged in as the superadministrator (the one that first setup the Limesurvey installation) and you still can't switch this off?

Here in my 2.06installation the filter is off and there is no problem. So I am not sure if this is general bug our just something that has to do with your installation.

So this happened just out of the blue? No changes made to the installation, no upgrade, etc?

By the way, 150619 isn't the latest built of Limesurvey.

I'm not a LimeSurvey GmbH member. I answer at the LimeSurvey forum in my spare time. No support via private message.
Some helpful links: Manual (EN) | Question Types | Workarounds

Please Log in or Create an account to join the conversation.

More
2 years 10 months ago #124602 by StefanBasen
StefanBasen replied the topic: Filter HTML for XSS cant be deaktivated
Yeah superadmin and even with that Account it changes back to active. Im also not sure where and why this is happening. Didnt changed anything on serverside or inside the installation.

Please Log in or Create an account to join the conversation.

More
2 years 10 months ago #124606 by holch
holch replied the topic: Filter HTML for XSS cant be deaktivated
Try to empty your browser cache and try also a different browser. When we can eliminate that something got stuck in the interface, then maybe it makes sense to file a bug report.

I'm not a LimeSurvey GmbH member. I answer at the LimeSurvey forum in my spare time. No support via private message.
Some helpful links: Manual (EN) | Question Types | Workarounds

Please Log in or Create an account to join the conversation.

Start now!

Just create your account and start using Limesurvey today.

Register now
Join our Newsletter!