JavaScript Embeds Being Stripped from Post
By cc-blog on Wednesday, 03 June 2015
Posted in General Issues
Likes 0
Views 0.9K
Votes 0
Hi there -

I am attempting to add a simple Rafflecopter embedded script within a blog post. I have done the following.

- disabled both the Joomla TinyMCE and EasyBlog TinyMCE editors
- added the embed code which includes a JavaScript element
- when I save the post, the content inside the <script> tags is being stripped out

It is not a site wide setting since I can add this embed code to an article no problem.

Is there a setting I am missing to allow this? Any troubleshooting suggestions?
Hello cc-blog,

Sorry for late reply to this,

EasyBlog doesn't actually restrict you from inserting "script" tag because that editor will help you render it out.
If you are using the TINYMCE editor, you should add iframe/script into the plugin parameter as the Extended valid elements.
Example : Add this following code in your Tiny-MCE plugin setting from your backend
script[language|type|src], iframe[src|title|width|height|allowfullscreen|frameborder|class|id]

Check my screenshot below. Hope this help.
Arlex Wong
·
Wednesday, 03 June 2015 18:43
·
0 Likes
·
0 Votes
·
0 Comments
·
Hello,

Thanks for the response. However I did say I already disabled the TinyMCE editor. In a Joomla article I can embed the script tag no problem. But in EasyBlog it doesn't work. I turned it back on and tried your suggestion but it's the same problem. Any suggestions on how or why Easyblog is stripping this out.

We are on the latest: 3.9.24862
cc-blog
·
Thursday, 04 June 2015 02:10
·
0 Likes
·
0 Votes
·
0 Comments
·
Hi,

Can you provide us with your embed code again? maybe you put in a test file and attach at here.

Because I didn't see any example code appear on your previous reply.
Arlex Wong
·
Thursday, 04 June 2015 02:18
·
0 Likes
·
0 Votes
·
0 Comments
·
Here is the embed code.

<a class="rcptr" href="http://www.rafflecopter.com/rafl/display/5dced1cb1/" rel="nofollow" data-raflid="5dced1cb1" data-theme="classic" data-template="" id="rcwidget_loyaambj">a Rafflecopter giveaway</a>
<script src="//widget-prime.rafflecopter.com/launch.js"></script>
cc-blog
·
Thursday, 04 June 2015 02:24
·
0 Likes
·
0 Votes
·
0 Comments
·
Hi,

I'm really sorry that delayed of this reply,

I have tried in my locally without any editor, it work fine for me, check my screenshot below.

Can you give it a look and see is it referring this?

By the way, I tried to access in your Joomla backend, then hitting this : Page Not Found. Go back to xxx Please advise.

EDITED
Arlex Wong
·
Friday, 05 June 2015 01:30
·
0 Likes
·
0 Votes
·
0 Comments
·
Is there a way to PM each other or communicate outside the forum? I think it would be much more efficient and we can quickly get you access to our website to help troubleshoot this.

Also please remove the reference to our website/company on your reponse (this is a publicly viewed forum, right?).

Regards,
Brendan
cc-blog
·
Friday, 05 June 2015 01:40
·
0 Likes
·
0 Votes
·
0 Comments
·
Hi,

Sorry about that, I already removed that.

Unfortunately we do not available other communicate system.

Yes, our forum is publicly viewed, but you can put with your important detail in "Site Details", As for confidentiality, the username and password you've provide to us will not be reveals to anyone else other than the support team of Stackideas:)
Arlex Wong
·
Friday, 05 June 2015 01:46
·
0 Likes
·
0 Votes
·
0 Comments
·
Ok. I want to get you access to the site -- it works on our development machine but not production, so the fact that it also works on your local isn't that helpful

Can you confirm what URL you are visiting and getting this error? (exclude the domain name from your answer please)
cc-blog
·
Friday, 05 June 2015 01:54
·
0 Likes
·
0 Votes
·
0 Comments
·
Hi,

Yes, I'm still hitting the same issues Page Not Found. Go back to xxxx when I trying to access this Joomla backend URL http://youdomain.com/administrator?xxxxxx

I remember yesterday night I still can access. please advise.
Arlex Wong
·
Friday, 05 June 2015 02:48
·
0 Likes
·
0 Votes
·
0 Comments
·
Oh sorry. Just realized it is blocked. I've opened it up for now but will need an IP from you to whitelist access (if you need more time after today). I'm not sure if you are looking into this now so I will close it back up in another hour or so.
cc-blog
·
Friday, 05 June 2015 03:03
·
0 Likes
·
0 Votes
·
0 Comments
·
Hi,

I think that would be better when I reach office then only send my IP address for you, because now already 3.10am here.

I will keep you update what is my current IP address later.
Arlex Wong
·
Friday, 05 June 2015 03:10
·
0 Likes
·
0 Votes
·
0 Comments
·
Okay, I will wait for your IP and close access for now.
cc-blog
·
Friday, 05 June 2015 03:18
·
0 Likes
·
0 Votes
·
0 Comments
·
Hi,

Sorry for delayed response to you, this is my current IP address now -> 110.159.167.111
Arlex Wong
·
Friday, 05 June 2015 10:25
·
0 Likes
·
0 Votes
·
0 Comments
·
You have been whitelisted. Pay attention to the admin url.
cc-blog
·
Friday, 05 June 2015 10:40
·
0 Likes
·
0 Votes
·
0 Comments
·
Hi,

Can you add my current IP address 175.136.58.42 in your server whitelist?

because just now office restart the WIFI router, so the IP address already generated.
Arlex Wong
·
Friday, 05 June 2015 16:19
·
0 Likes
·
0 Votes
·
0 Comments
·
Added this one as well.
cc-blog
·
Friday, 05 June 2015 22:29
·
0 Likes
·
0 Votes
·
0 Comments
·
Hi,

I am really sorry for the delay of this reply as it is a weekend for us here.

May i know is there a way temporary disable the security, so that I can directly access? Because when I try access in my home WIFI, then the IP address is different already.

By the way, this is my current IP address 175.145.128.220
Arlex Wong
·
Saturday, 06 June 2015 11:20
·
0 Likes
·
0 Votes
·
0 Comments
·
No way to disable the security for now. I've added the other IP.
cc-blog
·
Saturday, 06 June 2015 12:53
·
0 Likes
·
0 Votes
·
0 Comments
·
Hi,

For some reason, I can't login in your frontpage for view my test post in your site.

Can you provide us one of the login account from your frontend?
Arlex Wong
·
Saturday, 06 June 2015 13:57
·
0 Likes
·
0 Votes
·
0 Comments
·
Use the same login as the backend. But if that js code stays when you save the post then it is working. It always gets stripped out for me after saving the post. What did you do?
cc-blog
·
Sunday, 07 June 2015 10:32
·
0 Likes
·
0 Votes
·
0 Comments
·
It's a bit late in the discussion, but you can use the ticket system for a more private conversation.

crm.stackideas.com

Just a thought. If you pursue it, be sure to reference this post.
David Montoya
·
Sunday, 07 June 2015 10:51
·
0 Likes
·
0 Votes
·
0 Comments
·
Hi,

Yes, that was strange, because when I put the script code from backend Easyblog creation page, the code will not strip out.

May i know do you create a blog post from frontend or backend?

By the way, this is my current IP address -> 175.145.128.160

==============================================================================================================

Thanks heading up on this David.
Arlex Wong
·
Sunday, 07 June 2015 11:35
·
0 Likes
·
0 Votes
·
0 Comments
·
- We are publishing from the backend.

- Can you confirm what you did? Did you enable or disable anything before making this post?

- It still does not work for us. I even just edited your test post and it stripped out the JavaScript. Would browsers make a difference? What browser did you use?
cc-blog
·
Monday, 08 June 2015 23:17
·
0 Likes
·
0 Votes
·
0 Comments
·
hi,

This is my IP address -> 175.145.128.213 I can check it now.

Actually I'm not really sure that is work or not, because that day I can't see the result.

And I didn't make any changes, what i did is just edit the blog post and save it, then i noticed the script didn't get strip out.

I believe that shouldn't related the browser, by the way, I using Chrome browser test for this.
Arlex Wong
·
Monday, 08 June 2015 23:30
·
0 Likes
·
0 Votes
·
0 Comments
·
I've added your IP again.

When we hit save we know right away if it doesn't work as it always strips out the script.
cc-blog
·
Tuesday, 09 June 2015 00:25
·
0 Likes
·
0 Votes
·
0 Comments
·
Hi,

that was strange, I've try play around create a blog post from backend, but this time all the script tag get stripped out.

And also I can't login in your frontend and I already tried using backend login credential, it seems like still not working.

I have create one blog post is generated from TINY-MCE editor, the blog post name call "this is test 2" , can you check this blog post in frontend is it show correctly or not?
Arlex Wong
·
Tuesday, 09 June 2015 01:03
·
0 Likes
·
0 Votes
·
0 Comments
·
No it didn't work.
cc-blog
·
Tuesday, 09 June 2015 01:41
·
0 Likes
·
0 Votes
·
0 Comments
·
Is there an update to this? Can we escalate this somehow?
cc-blog
·
Tuesday, 09 June 2015 19:58
·
0 Likes
·
0 Votes
·
0 Comments
·
Hello,

I am sorry for the delay of this reply.

I believe it will be easier for us to communicate through crm.stackideas.com as it will be more private there and easy to be follow up by our staff. However its totally depends on your decision.

Back to the issue, we cannot access to your administrator area now due to different ip get generated each day in our region. This is our current ip address : 175.136.61.168

Please advise.
Ezrul Fazwan
·
Wednesday, 10 June 2015 16:31
·
0 Likes
·
0 Votes
·
0 Comments
·
I've added your IP again. I've also created a ticket at crm as you suggested.
cc-blog
·
Wednesday, 10 June 2015 18:48
·
0 Likes
·
0 Votes
·
0 Comments
·
Hi Alen,

Thanks for getting back to us,

it seems like work fine for me, check my video link : http://screen.stackideas.com/2015-06-10_1921.swf

Can you give it a try?


Best Regards
Arlex
Arlex Wong
·
Wednesday, 10 June 2015 19:22
·
0 Likes
·
0 Votes
·
0 Comments
·
View Full Post