How to securely download data from ckeditor?

M

Michael2017-03-12 07:02:23

MySQL

Michael, 2017-03-12 07:02:23

Good afternoon.
I'm putting together a small blogging system.
I want to use ckeditor as a text editor.
The trick is that articles can be created by everyone, including outsiders.
How to securely download data from ckeditor?
It's just that you can put whatever you want in there.
Or maybe there is something more rational?

Reply

Answer the question

In order to leave comments, you need to log in

2 answer(s)

S

Stalker_RED, 2017-03-12
@mix_gorbachev

ckeditor has custom filters
docs.ckeditor.com/#!/api/CKEDITOR.htmlDataProcessor
the filter in the browser is easily bypassed.
Something like htmlpurifier , for example

V

Vasya Petrov, 2017-03-12
@VasyaPertrov

How to securely download data from ckeditor?

Always filter any entry in the database, do not allow any code.