Tickets :: Comment on [#13375] Add MathML Support

* Your Email Address
* Spam protection	Enter the letters below: . ..___. __ \ /.___. \| \| _/ / ` >< _/ \|__\|./__.\__./ \./__.
Comment	> This is a problem with both the xss filter (which adds quoting) AND > the tidy extension (which actually rips out the math portion > completely). > > However, this seems to be common among other XSS filters also. i.e. > testing with https://github.com/cure53/DOMPurify, it also strips out > the entire math tag. > > There's currently a disconnect between supporting this relatively new > browser feature, but the issue existing XSS filters don't work well > on it. And at this point, we have to be better safe than sorry. > > I've been thinking about redoing our XSS filter for awhile now ... > since it doesn't fit properly in Text_Filter. I'll look at this more > once I finish with that.
Attachment
Watch this ticket