3

I'm running on Wagtail 1.3.1, Django 1.7.11.

I have activated hallohtml and hallojustify plugins and they appear in toolbar (without icons but buttons are here).

The buttons can be used and the modifications are seen in the textarea (I mean that I can center a field for example and I see it).

When I publish the page, the modifications made by either hallojustify or hallohtml are not saved whereas I can still use the bold/italic buttons and save the content. It looks like the html is cleaned up...

I should miss something but...

@hooks.register('insert_editor_js')
def editor_js():
js_files = [
]
js_includes = format_html_join('\n', '',
((settings.STATIC_URL, filename) for filename in js_files)
)

return js_includes + format_html(
        """
        <script>
          registerHalloPlugin('hallojustify');
          registerHalloPlugin('hallohtml');
        </script>
        """
    )
F Labbé
  • 142
  • 8

1 Answers1

5

By design, Wagtail only allows a subset of HTML tags and attributes, and strips out any that are not on its whitelist. This is done for several reasons: it prevents editors from inserting malicious content (such as <script> tags), and encourages site developers to keep content and presentation separate. (You shouldn't really be including formatting information such as left/right/centre alignment inside rich text content - that should be defined inside your template and CSS.)

You can customise the HTML whitelisting rules using the construct_whitelister_element_rules hook - however, I'd encourage you to reconsider whether you really need to overload the rich text editor with so much functionality, or whether there's a more structured way of achieving what you want (such as StreamField).

Steve Jalim
  • 11,989
  • 1
  • 37
  • 54
gasman
  • 23,691
  • 1
  • 38
  • 56
  • 1
    thank you for explanation (ok i didn't read enough the documentation. I was not aware of that whitelist, it makes sense. However, I do understand the idea behind StreamField, but sometimes small design changes (like a center) don't worth a whole template (or i missed something on how to implement StreamField) – F Labbé Jun 29 '16 at 12:42