JiHong88 / suneditor

Pure javascript based WYSIWYG html editor, with no dependencies.
http://suneditor.com
MIT License
1.74k stars 309 forks source link

Content <script> tag removed - not HTML #1378

Open JanValkenburg opened 5 months ago

JanValkenburg commented 5 months ago

Describe the bug The script tag got removed when loading SunEditor This shouldn't be possible as this is not HTML, but just plain content.

& lt;script& gt;x& lt;/script& gt;

This is the HTML before loading the editor.

(i had to add spaces after the & char to render it correctly in github - those spaces after the & are not in the real code)

maximehuran commented 1 month ago

We will be able to do that in 3.0.0 I think with the Strict mode

https://github.com/JiHong88/suneditor/blob/0ae76130facb56f0f5eb7f340ccfbc9ae1a92ee9/README_V3_TEMP.md?plain=1#L136