[Building Sakai] Selectively Alowing Javascrip in the WYSIWYG Editor

[Matthew Jones]

I think typically if you wanted to do this you'd add this code to the
headscripts.js or make a change to the vm for the portal of a site like the
google analytics.
https://jira.sakaiproject.org/browse/SAK-25634

In 10, there is a feature to allow custom vm files on the system level so
you don't even have to modify portal and you can even do it specifically
for each skin.
https://jira.sakaiproject.org/browse/SAK-25456

If you want to do it only for the site, there is a site property that an
administrator can add to add any content into the body of the document.
sakai:htmlInclude
https://jira.sakaiproject.org/browse/SAK-15097

I'm not sure if modifying the antisamy files would solve the problem as
well as these other cases would and most sites are able to embed their
content with an iframe or an object. (Where specific urls are allowed in
the high config as Sam mentioned but unfiltered in the low config)

You could probably get something to work though.


On Thu, Apr 10, 2014 at 3:05 PM, Sam Ottenhoff <ottenhoff at longsight.com>wrote:

> I would look into selectively enabling iframe paths via the AntiSamy
> configuration file.  You can look for examples like YouTube in the existing
> configuration:
>
>   kernel/kernel-impl/src/main/resources/antisamy/high-security-policy.xml
>
> You can store a modified version of that policy file in your Sakai home's
> sakai/antisamy/ directory.
>
> --Sam
>
>
>
> On Thu, Apr 10, 2014 at 2:23 PM, Mustansar Mehmood <mustansar at rice.edu>wrote:
>
>> Hi,
>>      Is there any way in Sakai 10 to allow Javascript from
>> selected/enumerated list of domain? such as js.schoo.edu?  I am not sure
>> if same origin policy is being violated in this case.
>> I am looking into this to embed videos and to address other local
>> integration avenues.
>> Thanks,
>> Mustansar
>>
>> --
>> Mustansar Mehmood
>> Educational System Developer& Integrator
>>
>> Information Technology
>> 6100 Main St. MS 119
>> Houston Texas 77005
>>
>> Phone:(713)348-2523
>> Fax  :(713)348 6099
>> email:mustansar at rice.edu
>>
>>
>>
>>
>>
>> I have yet to see any problem, however complicated, which, when,you
>>  looked at it in the right way, did not become still more complicated.
>>      -- Poul Anderson
>>
>> _______________________________________________
>> sakai-dev mailing list
>> sakai-dev at collab.sakaiproject.org
>> http://collab.sakaiproject.org/mailman/listinfo/sakai-dev
>>
>> TO UNSUBSCRIBE: send email to
>> sakai-dev-unsubscribe at collab.sakaiproject.org with a subject of
>> "unsubscribe"
>>
>
>
> _______________________________________________
> sakai-dev mailing list
> sakai-dev at collab.sakaiproject.org
> http://collab.sakaiproject.org/mailman/listinfo/sakai-dev
>
> TO UNSUBSCRIBE: send email to
> sakai-dev-unsubscribe at collab.sakaiproject.org with a subject of
> "unsubscribe"
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://collab.sakaiproject.org/pipermail/sakai-dev/attachments/20140410/62293eee/attachment.html