OJS 2.4.8 - Google Maps under abstract

[ctgraham]

Yes, HTML Purifier will remove <script> tags even if specified in allowed_html. See:

Put video on first page ojs3

Hmmm… yes, HTMLPurifier’s defaults will still prevent ids and script tags even if the allowed_html is modified. This will require a code modification to the PKPString::stripUnsafeHtml() function in lib/pkp/classes/core/PKPString.inc.php: The configuration options are documented here: http://htmlpurifier.org/live/configdoc/plain.html You’re probably interested in “EnableID” and “SafeScripting”.