diff --git a/main/install/configuration.dist.php b/main/install/configuration.dist.php index dfa64f5942..12eb60c633 100755 --- a/main/install/configuration.dist.php +++ b/main/install/configuration.dist.php @@ -313,6 +313,8 @@ $_configuration['system_stable'] = NEW_VERSION_STABLE; // $_configuration['question_exercise_html_strict_filtering'] = true; // Allows to do a remove_XSS in exersice result end text with user status COURSEMANAGERLOWSECURITY // $_configuration['exercise_result_end_text_html_strict_filtering'] = true; +// Allows to do a remove_XSS in wiki pages with user status COURSEMANAGERLOWSECURITY +// $_configuration['wiki_html_strict_filtering'] = true; // Prevents the duplicate upload in assignments // $_configuration['assignment_prevent_duplicate_upload'] = false; //Show student progress in My courses page diff --git a/main/wiki/wiki.inc.php b/main/wiki/wiki.inc.php index 5338e72020..1572b490cd 100755 --- a/main/wiki/wiki.inc.php +++ b/main/wiki/wiki.inc.php @@ -1096,7 +1096,11 @@ class Wiki ); } } else { - $content = Security::remove_XSS($row['content']); + if (true === api_get_configuration_value('wiki_html_strict_filtering')) { + $content = Security::remove_XSS($row['content'],COURSEMANAGERLOWSECURITY)); + } else { + $content = Security::remove_XSS($row['content']); + } $title = Security::remove_XSS($row['title']); }