Sentora Support Forums

I noticed TinyMCE was added to the Client Notice Manager module which is a great addition!
However, the actual notice that is displayed doesn't take note of the HTML and just displays it all as plain text.

For example if I wanted:

Welcome, click here for help!

It would display in the actual notice as:

<strong>Welcome,</strong> <a href="#">click here</a> for help!

I'll check my version, I had added tinyMCE a couple years back and had to remove a check that disables HTML in it.
The check isn't in the module. I'll have to check the core coding...

Found it
In /panel/dryden/ui/tpl/notice.class.php
Make that small change and it should work just fine

SECURITY NOTICE: By disabling the check mentioned above, you may be vulnerable to malicious XSS and other possible security risks. Use at your own risk!

(10-07-2015, 04:01 AM)TGates Wrote: [ -> ]Found it
In /panel/dryden/ui/tpl/notice.class.php

PHP Code:

                   //runtime_xss::xssClean($result['ac_notice_tx']),
            $result['ac_notice_tx'], // allows HTML in Client Notices 


Make that small change and it should work just fine

Thanks dude,

Edit: It works.