topic Re: How to disable HTML content Filter ? in Alfresco Archive

How to disable HTML content Filter ?

fliot — Tue, 26 Mar 2013 03:05:17 GMT

Hi,In Share,I upload a file "doc.html"<p>qsdqsd<img alt="" src="/webapp/proxy/alfresco/api/node/content/workspace/SpacesStore/26d578d9-0322-4dc2-972f-62f9c8e5f4a8/smart-phone-shopping.jpg" style="height: 80px; width: 100px;" /> qsdqs dq sdq </p>‍‍‍‍‍Dowloading it immediatelly, the

Re: How to disable HTML content Filter ?

mitpatoliya — Tue, 26 Mar 2013 07:55:37 GMT

Strange I do not think Alfresco do such filtering.
In fact I have tried the same thing but could not replicate your problem.

Re: How to disable HTML content Filter ?

fliot — Tue, 26 Mar 2013 09:56:00 GMT

Strange…
I do reproduce it on 4.0.e and on 4.2.c
In Share upload a simple html file, with the pasted above content, and styles aren't kept within the stored node.

Regards.

Re: How to disable HTML content Filter ?

michaelböckling — Tue, 26 Mar 2013 15:15:15 GMT

To my knowledge Alfresco doesn't filter uploaded content. Can you try to save the uploaded HTML with right-click "save as"? It could be that your browser is changing the DOM.

Best regards,
Michael

Re: How to disable HTML content Filter ?

fliot — Tue, 26 Mar 2013 15:57:00 GMT

30 seconds screencam with alfresco 4.2.c

https://docs.google.com/file/d/0B6idEMRjO2ECcktHbjA0QlhpMlE/edit?usp=sharing

No custom behavior or hidden script…
This is the real default.

Re: How to disable HTML content Filter ?

michaelböckling — Tue, 26 Mar 2013 16:41:16 GMT

For some reason the video won't load.
I just tried this myself, and when I open the file in the browser, I can reproduce your problem. However, when I click the "download" link and save the file to disk first, it is the same as the one that I uploaded when I open it.

Cheers,
Michael

Re: How to disable HTML content Filter ?

michaelböckling — Tue, 26 Mar 2013 16:44:00 GMT

Now the video loads, and I noticed you did something similar. What happens when you go into the doc details and then click on "download" without doing the "save link as"? If its fine then this is a browser issue.

Cheers,
Michael

Re: How to disable HTML content Filter ?

fliot — Tue, 26 Mar 2013 16:58:00 GMT

I do not believe it would be a browser issue,
I got it with Chromium and with Firefox, enabling flash or not client side..

I also tried enabling/disabling flash upload component in share and same behavior.

Re: How to disable HTML content Filter ?

michaelböckling — Tue, 26 Mar 2013 17:27:18 GMT

This is easy to find out.
1) Open the Node Browser: http://localhost:8080/alfresco/faces/jsp/admin/node-browser.jsp
2) Enter the NodeRef of your document (the part in the document details after ?nodeRef=) and search (make sure Search is set to "NodeRef" on the left side)
3) check if the size in the "{http://www.alfresco.org/model/content/1.0}content" property matches what you uploaded (search for |size=)

If the size is correct, Alfresco stores the binary as it should. You can also download directly from the repo browser.

4) Now, click straight "download" in the document details view and check again.

What do you get?

Best regards,
Michael

Re: How to disable HTML content Filter ?

fliot — Tue, 26 Mar 2013 17:36:36 GMT

Impressivelly fun, thanks for your interest 🙂

The stored node :
/alfresco/d/d/workspace/SpacesStore/a0f6d0f8-f99c-46db-8f2c-e77c4b587b0e/test.html
Does contain the "style" html code.

But getting it though share, it returns filtred content,
/share/proxy/alfresco/api/node/content/workspace/SpacesStore/a0f6d0f8-f99c-46db-8f2c-e77c4b587b0e/test.html

Is there a way to change this, not so natural, behavior ?
Some idea ?

Re: How to disable HTML content Filter ?

michaelböckling — Tue, 26 Mar 2013 17:44:48 GMT

Just to make sure: did you try to click the download link in the doc details view without the "save as"? This is actually important.

Re: How to disable HTML content Filter ?

fliot — Tue, 26 Mar 2013 19:20:36 GMT

In Share, clicking directly on Download or View in Browser I get same filtered node (knowing that in repository, my node remains with my html styles…).

Re: How to disable HTML content Filter ?

michaelböckling — Tue, 26 Mar 2013 23:10:01 GMT

I still have a hard time believing it
Can you upload a screencast of you downloading and opening the html?

Re: How to disable HTML content Filter ?

fliot — Thu, 28 Mar 2013 00:49:26 GMT

No video, but behavior confirmed with Chromium and Firefox, using single click "Download"…..
(or curl direct call to http://localhost:8080/share/proxy/alfresco/api/node/content/workspace/SpacesStore/bf4026e0-cbb7-4ee8-ac12-f89d37c0ce34/test.html?alf_ticket=TICKET_845df34fe4fdc3968287538905556f547cff7308 …)

Actually, it's funny to see that the share application html content filter does filter "<script>" and "style=", but not "height=" or "width=".
Difficult to believe there are no logic behind…

Example, in Affresco Explorer, I create a new node, in PLAIN/TEXT


Some text here<br />
<script type="text/javascript">
function d() { alert("d"); }
</script>
<br /> <a href="" onclick="d()">script example</a>
‍‍‍‍‍‍‍

/alfresco/d/d/workspace/SpacesStore/bf4026e0-cbb7-4ee8-ac12-f89d37c0ce34/test.html
/share/proxy/alfresco/api/node/content/workspace/SpacesStore/bf4026e0-cbb7-4ee8-ac12-f89d37c0ce34/test.html
Both present the same untouched content.

Still in Alfresco Explorer, I change the MIME type, and put it to HTML,
The content remain the same calling /alfresco/d/d/workspace/SpacesStore/bf4026e0-cbb7-4ee8-ac12-f89d37c0ce34/test.html
But the content is filtered with /share/proxy/alfresco/api/node/content/workspace/SpacesStore/bf4026e0-cbb7-4ee8-ac12-f89d37c0ce34/test.html


Some text here<BR />

<BR /> <A href="">script example</a>
‍‍‍‍‍

Share does definitively filter html contents !

Regards.

Re: How to disable HTML content Filter ?

fliot — Wed, 03 Apr 2013 09:25:02 GMT

It seems to be a known and documented behavior !!!

http://blogs.alfresco.com/wp/kevinr/2012/06/19/configuring-the-share-html-processing-blackwhite-list/

Regards,

Francois