[Using Sakai] Twenty-First Century Interactions on Sakai?

Marshall Feldman marsh at uri.edu
Mon Aug 27 18:18:11 PDT 2012


I've tried a few things like this, but so far I haven't had much success.

Thanks.
     Marsh Feldman

On 8/24/12 6:30 PM, Algaze, Louis Contractor, eDataTech wrote:
> Marshall,
>
> Have you explored using web pages within the Resources area and putting a
> Web Content link in the left navigation to specified page(s)?  Although
> the Rich Text Editor strips out all <head> content you can embed
> javascript calls into the <body> of a page by using a standard script call:
>
> <script type="text/javascript" id="templateScript"src="full or relative
> path to .js file"></script>
>
> Once that is there you should be able to go crazy with using that
> javascript.
>
> If you do not plan to modify any of the pages with the rich text editor
> you can use your favorite html editor and upload pages or an entire site
> using the WebDav (Upload/download multiple items) feature.
>
> All of this should be able to be performed Out of the Box, with no special
> configuration to the best of my knowledge.
>
> Louis
>
>
> On 8/24/12 12:02 PM, "Marshall Feldman" <marsh at uri.edu> wrote:
>
>> Thanks to Sam, Matt, and David who quickly answered my query.
>> Unfortunately, I am "just" a faculty member and, like most faculty
>> members, do not have access to the config package and all that. If I
>> were to suggest changing the overall University-wide configuration, the
>> administration would probably appoint a committee, which would recommend
>> hiring a consultant, which would require a budget augmentation, which
>> would take about 4 years to tell me they can't support the change.
>> (Sorry, this cynicism is well-earned.)
>>
>> One of my colleagues showed me a way around this that should work. So
>> I'm going to give it a try first.
>>
>>      Marsh Feldman
>>
>>
>> On 8/24/12 1:21 PM, Sam Ottenhoff wrote:
>>>> ... On a
>>>> regular web page using a jQuery plugin this is almost trivial. You
>>>> just have
>>>> a short amount of text and then a "read more" link that expands the
>>>> text
>>>> when the student wants to read the whole thing. See this example. But
>>>> how to
>>>> do this in Sakai?
>>> Modify the Sakai config package and change the goodTags property to
>>> allow all input from users.  It's a five minute change that will stop
>>> all HTML filtering and sanitation in Sakai.
>>>
>>> Making this change would be a security disaster if you do not have
>>> full trust in every *possible* user of your system. If you allow users
>>> to input Javascript into a web-based system, you are open to a
>>> gigantic class of attacks
>>> (http://en.wikipedia.org/wiki/Cross-site_scripting).
>>>
>>> If you don't have full trust in every single user in your system, then
>>> you need to add functionality centrally to your portal rendering
>>> instead of doing it as an instructor in a browser.  Add new styles
>>> into the rich-text editor configs.  Then render those new styles using
>>> the centralized jQuery code in your primary Sakai JS files.
>>>
>>> --Sam
>> _______________________________________________
>> sakai-user mailing list
>> sakai-user at collab.sakaiproject.org
>> http://collab.sakaiproject.org/mailman/listinfo/sakai-user
>>
>> TO UNSUBSCRIBE: send email to
>> sakai-user-unsubscribe at collab.sakaiproject.org with a subject of
>> "unsubscribe"

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://collab.sakaiproject.org/pipermail/sakai-user/attachments/20120827/c494e433/attachment-0001.html 


More information about the sakai-user mailing list