Skip to content

Commit 74268ed

Browse files
authored
[!!!][TASK] Remove default parseFunc configuration for FSC (#1622)
Resolves: TYPO3-Documentation/Changelog-To-Doc#1319 Releases: main
1 parent 20b5f05 commit 74268ed

File tree

1 file changed

+28
-5
lines changed

1 file changed

+28
-5
lines changed

Documentation/Functions/Parsefunc.rst

Lines changed: 28 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -8,6 +8,14 @@
88
parseFunc
99
=========
1010

11+
.. versionchanged:: 14.0
12+
13+
`lib.parseFunc.allowTags` and `lib.parseFunc_RTE.allowTags` do not contain
14+
default values anymore. HTML sanitization is continued to be handled by
15+
the htmlSanitizer.
16+
17+
See also: `Breaking: #107438 - Default parseFunc configuration for Fluid Styled Content <https://docs.typo3.org/permalink/changelog:breaking-107438-1736592000>`_
18+
1119
This object is used to parse some content for stuff like special typo
1220
tags, the :ref:`makeLinks`-things and so on...
1321

@@ -235,13 +243,19 @@ allowTags
235243
.. confval:: allowTags
236244
:name: parsefunc-allowTags
237245
:type: list of strings or "*"
246+
:default: Empty
247+
248+
.. versionchanged:: 14.0
238249

239-
.. versionchanged:: 13.2
240-
Defining the TypoScript properties :typoscript:`allowTags` or
241-
:typoscript:`denyTags` for the HTML processing via
242-
:typoscript:`stdWrap.parseFunc` is now optional.
250+
`lib.parseFunc.allowTags` and `lib.parseFunc_RTE.allowTags` do not contain
251+
default values anymore. HTML sanitization is continued to be handled by
252+
the htmlSanitizer.
243253

244-
Besides that, it is now possible to use :typoscript:`allowTags = *`.
254+
See also: `Breaking: #107438 - Default parseFunc configuration for Fluid
255+
Styled Content <https://docs.typo3.org/permalink/changelog:breaking-107438-1736592000>`_
256+
257+
HTML sanitization is handled by the htmlSanitizer in general. `allowTags`
258+
and `denyTags` can be used to further limit the allowed HTML tags.
245259

246260
List of tags, which are allowed to exist in code, use "*" for all.
247261
Security aspects are considered automatically by the HTML sanitizer,
@@ -265,6 +279,15 @@ allowTags
265279
denyTags = u
266280
}
267281
282+
.. rubric:: Migration
283+
284+
If you need to allow specific HTML tags, fully configure the allowTags option
285+
without relying on prior default configuration:
286+
287+
.. code-block:: diff
288+
289+
- lib.parseFunc_RTE.allowTags := addToList(wbr)
290+
+ lib.parseFunc_RTE.allowTags = b,span,i,em,wbr..
268291
269292
270293
.. _parsefunc-denyTags:

0 commit comments

Comments
 (0)