I'm looking for some hidden configuration settings that will allow me to disable XSS filtering when using Cartthrob. The global EE config item is ignored.

Is this possible?

1 Answer 1


It absolutely is.

You can find information on how to disable XSS filtering on this thread Are PDFs still an XSS problem with EE uploads?

  • Are you sure this works specifically with Cartthrob? After looking through code + docs, it looks like CT sends everything through XSS and ignores any config that is set.
    – Jon Horton
    Nov 20, 2013 at 12:16
  • No I don't know about Cartthrob specifically. The config affects file uploads. Are you talking about the transactional processes going on in an ecommerce site?
    – foamcow
    Nov 20, 2013 at 14:04

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.