Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeOur CommunityOur CommunityGeneral Discuss...General Discuss...scriptscript
Previous
 
Next
New Post
11/1/2014 9:42 PM
 
script 
Hi, I have a strange question. I tried to enter a code for a carousel in the html module. What I do not understand is why the code javascript will be ignored and deleted.  For example:
<script type="text/javascript" src="engine1/script.js"></script>, this code will disappear inexplicably.

Can anyone help me please?

Thank you for your help.

Match58

 

 
New Post
11/2/2014 12:04 AM
 
It will be removed, that is standard in HTML module. You can add script by adding it into the header of the module via module settings.
 
New Post
11/3/2014 9:42 AM
 
It is not a standard in the HTML module. It is a configurable setting in the HTML Editor. You can turn it off if you go to Host, HTML Editor Manager and look at the editor settings. Uncheck the box labelled "Remove Scripts."



Joe Craig
Patapsco Research Group, Ellicott City, MD
DotNetNuke Development and Services (http://patapscorg.com)
 
New Post
11/3/2014 10:54 AM
 
I think if you do that then anyone who can use the HTML editor on the site (eg forum users or blog writers) may be able to mount a script injection attack. If you don't use such features, or you trust those who can use them, then you should be fine.

Best wishes,
- Richard
Agile Development Consultant, Practitioner, and Trainer
www.dynamisys.co.uk
 
New Post
11/3/2014 12:38 PM
 
If you allow scripts in the HTML editor, if a spammer gets an account on your site, they could then put scripts in their user bio from their profile.

Safest to add to the module Header (or Page Header).
 
Previous
 
Next
HomeHomeOur CommunityOur CommunityGeneral Discuss...General Discuss...scriptscript


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out