[Tickets #13375] Re: Add MathML Support

[noreply at bugs.horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/13375
------------------------------------------------------------------------------
  Ticket             | 13375
  Updated By         | Michael Slusarz <slusarz at horde.org>
  Summary            | Add MathML Support
  Queue              | IMP
-Version            | 6.2.0
+Version            | Git master
  Type               | Enhancement
-State              | New
+State              | Assigned
  Priority           | 1. Low
  Milestone          |
  Patch              |
-Owners             |
+Owners             | Michael Slusarz
------------------------------------------------------------------------------


Michael Slusarz <slusarz at horde.org> (2014-07-21 22:54) wrote:

This is a problem with both the xss filter (which adds quoting) AND  
the tidy extension (which actually rips out the math portion  
completely).

However, this seems to be common among other XSS filters also.  i.e.  
testing with https://github.com/cure53/DOMPurify, it also strips out  
the entire math tag.

There's currently a disconnect between supporting this relatively new  
browser feature, but the issue existing XSS filters don't work well on  
it.  And at this point, we have to be better safe than sorry.

I've been thinking about redoing our XSS filter for awhile now ...  
since it doesn't fit properly in Text_Filter.  I'll look at this more  
once I finish with that.