0

Before the 2.3.0 upgrade, we could incorporate inline styles within the WYSIWYG editor without any issues.

So we could add

<script>alert("bingo");</script>

to a product description, save the code, refresh the product view page and receive the javascript alert.

We can still save the snippet, but after the text is saved in Admin and we re-open the text block, that snippet is completely removed. The code still executes on the product page. There are zero errors in any of the web server logs nor are than any console errors. We are really at a loss.

The one thing we did notice is that the WYSIWYG editor is missing a lot of features such as the font color selector, that used to be there. It might be related.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.