FCKeditor/Tiny_mce & security

Archives Yii 1.0.x Discussions
1

How to optimal secure posting data in case using java-based web editor?

Thanks to advance

2

Could you explain a bit more about your concern?

3

i use FCKeditor and write new post "<h1>XXX</h1>"

With 

CHtml::encode
i have raw text “<h1>XXX</h1>”, but i want “XXX” and remove 
CHtml::encode
from my view. Now I’m open for hack or not? May be need configure security settings in FCKeditor?
4

You use FCKeditor because you want to allow HTML input.

To prevent XSS attack, you can filter the output with CHtmlFilter.

5

Thanks. All done.