568211 - turn off rich text editor on project comments

Status: RESOLVED FIXED

(Websites Graveyard :: drumbeat.org, defect)

Description

[Ned Schwartz]

1) it is a vector for image-based spam which could tank the server.
2) it will lead to disastrously broken pages as inexperienced users abuse the power of RTE
3) it is a usability issue as the increased height of the RTE input pushes the published comments too far down the page - we need to see the comment form and some comments above the fold.

Comment 1

[Paul Booker]

Sorry , Ned

I couldn't figure out how to make this change. I'll unassign myself while i get my local server running again in case anyone else wants to pick this one up.

http://drupal.org/node/371459

Thoughts:

I have never used the wysywig api module with any editor so i don't know how well it works normally but i do know that when you install just the fckeditor module with the fckeditor you are able to configure which content types  can use the editor but i can't recall if that is done on the edit content type page or on the fckeditor administrator page i believe it is the latter   

Best, Paul

Comment 2

[Ned Schwartz]

Thanks Paul!

You pointed me in the right direction and I think I've got it!

Nice work.

Ned

Comment 3

[Ned Schwartz]

Okay, So

Comment 4

[Ned Schwartz]

... I have updated the text editor site wide so that the default for users is a plain textarea that accepts "filtered html". 

Only << admin, Devel Access, Group Admin, Group Officer, Project Member >> have the the right to switch to a RTE with full HTML.

This affects all content, form comments to blog posts to project descriptions etc.

Comment 5

[Ned Schwartz]

CHANGES:

http://drumbeat.trellon.org/dbl/admin/settings/filters
'Filtered HTML' should be set as the default filter.

http://drumbeat.trellon.org/dbl/admin/settings/filters/2
remove access from anonymous and authenticated users.

http://drumbeat.trellon.org/dbl/admin/settings/wysiwyg
Filtered HTML is associated with No editor: click the 'Delete' operation on 'Filtered HTML'