Support specification of allowed tags/attributes/protocols via global package parameters.
This change makes it possible to define for a package values for AllowedTags, AllowedAttributes, or AllowedProtocols. If (some of) these exist, use these for configuring "ad_html_security_check". If + not, fall back to the default (site wide) definition.
This change is fully backward compatible and effects on sites defining such global parameters. This change was induced by the need of large sites, where it is not feasible to set these parameters on the package instance level, since this site has 830000 packages instances.
Added the option to parameterize www-delete and www-toggle-publish-status with return_url
In cases, these www* methods are called programmatically, these can be now parameterized with an "-return_url" parameter to achieve e.g. workflow-specific behavior.
Many thanks to Thomas Renner for the analysis on www-toggle-publish-status.
Loading ...