diff --git a/lib/WebGUI/Help/Asset_Collaboration.pm b/lib/WebGUI/Help/Asset_Collaboration.pm index 17bb36b70..fa476b576 100644 --- a/lib/WebGUI/Help/Asset_Collaboration.pm +++ b/lib/WebGUI/Help/Asset_Collaboration.pm @@ -1,6 +1,17 @@ package WebGUI::Help::Asset_Collaboration; our $HELP = { + 'collaboration add/edit' => { + title => 'collaboration add/edit title', + body => 'collaboration add/edit body', + related => [ + { + tag => 'content filtering', + namespace => 'WebGUI' + }, + ] + }, + 'collaboration template labels' => { title => 'collaboration template labels title', body => 'collaboration template labels body', diff --git a/lib/WebGUI/Help/Asset_HttpProxy.pm b/lib/WebGUI/Help/Asset_HttpProxy.pm index 08d5fa297..c5067eda0 100644 --- a/lib/WebGUI/Help/Asset_HttpProxy.pm +++ b/lib/WebGUI/Help/Asset_HttpProxy.pm @@ -17,6 +17,10 @@ our $HELP = { tag => 'http proxy template', namespace => 'Asset_HttpProxy' }, + { + tag => 'content filtering', + namespace => 'WebGUI' + }, ] }, diff --git a/lib/WebGUI/Help/WebGUI.pm b/lib/WebGUI/Help/WebGUI.pm index 155d37c25..bbc610bbb 100644 --- a/lib/WebGUI/Help/WebGUI.pm +++ b/lib/WebGUI/Help/WebGUI.pm @@ -29,6 +29,12 @@ our $HELP = { } ] }, + 'content filtering' => { + title => '418', + body => 'content filter body', + related => [ + ], + }, 'trash empty' => { title => '696', body => '651', diff --git a/lib/WebGUI/i18n/English/WebGUI.pm b/lib/WebGUI/i18n/English/WebGUI.pm index 650eee1d1..ed3fd7d65 100644 --- a/lib/WebGUI/i18n/English/WebGUI.pm +++ b/lib/WebGUI/i18n/English/WebGUI.pm @@ -4029,9 +4029,32 @@ Just as the LDAP Identity Name is a label, so is the LDAP Password Name. Use thi context => q|Tab label for the user's profile in the user manager.| }, + 'content filter body' => { + message => q|

WebGUI has many features to accept content from outside sources, such as users posting to message boards or pulling data from external websites via the HttpProxy or SyndicatedContent Assets. However, this can expose pose a risk to your site, for example, through cross-site scripting attacks.

+

To help solve this problem +many Assets have a ^International("418","WebGUI"); property that performs various leveling +of filtering on content. Each one is pretty self-explanatory: +

+
^International("420","WebGUI"); +
No filtering will be done. All original content will be displayed.
+
^International("891","WebGUI");
+
Negates WebGUI Macros. Instead of displaying Macro output, the Macro itself +will be shown;
+
^International("526","WebGUI");
+
Negates WebGUI Macros. Removes the contents of <script> tags and deletes +JavaScript fields from HTML tags.
+
^International("421","WebGUI");
+
Removes everything except for bold, italics, breaks, etc.
+
^International("419","WebGUI");
+
Strips everything that it can, returning just plain old, safe text.
+

+|, + lastUpdated => 1113681314, + }, + 'glossary title' => { - message => q|Glossary|, - lastUpdated => 1111729014, + message => q|WebGUI Glossary|, + lastUpdated => 1031514049 }, 'glossary body' => {