1

I'm looking for some hidden configuration settings that will allow me to disable XSS filtering when using Cartthrob. The global EE config item is ignored.

Is this possible?

1

It absolutely is.

You can find information on how to disable XSS filtering on this thread Are PDFs still an XSS problem with EE uploads?

| improve this answer | |
  • Are you sure this works specifically with Cartthrob? After looking through code + docs, it looks like CT sends everything through XSS and ignores any config that is set. – Jon Horton Nov 20 '13 at 12:16
  • No I don't know about Cartthrob specifically. The config affects file uploads. Are you talking about the transactional processes going on in an ecommerce site? – foamcow Nov 20 '13 at 14:04

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.