1

I'm looking for some hidden configuration settings that will allow me to disable XSS filtering when using Cartthrob. The global EE config item is ignored.

Is this possible?

Improve this question

1 Answer 1

Reset to default
1

It absolutely is.

You can find information on how to disable XSS filtering on this thread Are PDFs still an XSS problem with EE uploads?

Improve this answer
2
  • Are you sure this works specifically with Cartthrob? After looking through code + docs, it looks like CT sends everything through XSS and ignores any config that is set.
    – Jon Horton
    Nov 20, 2013 at 12:16
  • No I don't know about Cartthrob specifically. The config affects file uploads. Are you talking about the transactional processes going on in an ecommerce site?
    – foamcow
    Nov 20, 2013 at 14:04

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.