1

I'm looking for some hidden configuration settings that will allow me to disable XSS filtering when using Cartthrob. The global EE config item is ignored.

Is this possible?

Improve this question

1 Answer 1

Reset to default
1

It absolutely is.

You can find information on how to disable XSS filtering on this thread Are PDFs still an XSS problem with EE uploads?

Improve this answer
2
  • Are you sure this works specifically with Cartthrob? After looking through code + docs, it looks like CT sends everything through XSS and ignores any config that is set. Commented Nov 20, 2013 at 12:16
  • No I don't know about Cartthrob specifically. The config affects file uploads. Are you talking about the transactional processes going on in an ecommerce site? Commented Nov 20, 2013 at 14:04

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.