Is there a way to prevent textarea fields from altering code entered into them?

I've turned on no_xss_check on and the following:

Code: Select all

<DIV ALIGN=JUSTIFY>

<br>

I've recently (ok FINALLY) launched my much anticipated <a href="https://www.youtube.com/user/NuzzacoPhoto"><u>photography channel</u></a> on Youtube today. My first episode is a bit of a departure from my usual content. The first episode is dedicated to advanced Photoshop compositing techniques.
<br><br>

<center><iframe width="800" height="437" src="http://www.youtube.com/embed/4LkJKAsrFbc" frameborder="0" allowfullscreen></iframe></center>

<br><br>
Pictured below is the final product of all the compositing work:
<br><br>
<center><a href="http://www.flickr.com/photos/46925679@N04/6892765173/"><img src="http://farm8.staticflickr.com/7190/6892765173_6cb9bbe014_z.jpg"></img></a></center>
<br>
</div>

becomes:

Code: Select all

<div ALIGN=JUSTIFY>

<br />

I&#039;ve recently (ok FINALLY) launched my much anticipated <a href="https://www.youtube.com/user/NuzzacoPhoto"><u>photography channel</u></a> on Youtube today. My first episode is a bit of a departure from my usual content. The first episode is dedicated to advanced Photoshop compositing techniques.

<br /><br />


<center>&lt;iframe width=&quot;800&quot; height=&quot;437&quot; src=&quot;http://www.youtube.com/embed/4LkJKAsrFbc&quot; frameborder=&quot;0&quot; allowfullscreen&gt;&lt;/iframe&gt;</center>

<br /><br />

Pictured below is the final product of all the compositing work:

<br /><br />

<center><a href="http://www.flickr.com/photos/46925679@N04/6892765173/"><img src="http://farm8.staticflickr.com/7190/6892765173_6cb9bbe014_z.jpg"/></a></center>



<br />

</div>

It outputs the iframe as regular text...

<iframe width="800" height="437" src="http://www.youtube.com/embed/4LkJKAsrFbc" frameborder="0" allowfullscreen></iframe>

I just tried using no_xss_check on my global page to inject tracking code... in the page source code, I get this:

&lt;script&gt;

Should be <script>

[KK]

Suppose following is the editable region's definition -

<cms:editable type='textarea' name='my_code' />

You need to modify it as follows -

<cms:editable type='textarea' name='my_code' no_xss_check='1' />

After doing this, you need to visit the modified template via your browser while logged-in as super-admin.

Now coming back to the admin-panel, if there is any existing text in the concerned editable region, please delete it.
Input new text and save.
It should come up unaltered.

Please try the steps exactly as mentioned above and let me know how it goes.

Thanks.

Code: Select all

 <cms:editable 
      type="textarea"
      name="blog_post" 
      label="Blog Post" 
      desc="Body of blog post below. HTML allowed. 
      no_xss_check='1'
   /> 

I followed the steps, nothing has changed.

http://chrisnuzzaco.com/blog.php?p=29

I'm using the newest version of couch.

I just duplicated the template (blog_test.php) and it works....

Do I need to totally delete the old blog.php file? I already have posts created.

I got it to work. I had to delete the file, refresh admin page, reupload the php file, then refresh the admin page. Is this a bug or browser cache issue?

[KK]

The definition that you posted

Code: Select all

<cms:editable 
      type="textarea"
      name="blog_post" 
      label="Blog Post" 
      desc="Body of blog post below. HTML allowed. 
      no_xss_check='1'
   /> 

has a syntax error (the 'desc' is missing the closing quote).
I wonder if that had to do with the changes not getting picked up (although it should normally throw a conspicuous error)?

The definition that you posted

Code: Select all

<cms:editable 
      type="textarea"
      name="blog_post" 
      label="Blog Post" 
      desc="Body of blog post below. HTML allowed. 
      no_xss_check='1'
   /> 

has a syntax error (the 'desc' is missing the closing quote).
I wonder if that had to do with the changes not getting picked up (although it should normally throw a conspicuous error)?

LOL, sorry, I actually edited the code after pasting, it's not that way in my template.

If it's any help, I've been using the latest version of Firefox to edit the site.