Event attributes - eg: onclick, onload - are removed

As event attributes are able to execute javascript, their use is disabled unless specifically enabled in an Editor Profile. Event Attributes should only be enabled in profiles assigned to trusted users.

To enable Event Attributes

  1. From the JCE Control Panel, click on the Editor Profiles button, then click on a profile to edit, eg: "Default"
  2. Click on the Editor Parameters tab, then on the Advanced tab.
  3. Set the Allow Event Attributes option to Yes.
    If the Allow Javascript option is enabled, the Allow Event Attributes option will not be visible but will automatically be enabled.

    Enable the Allow Event Attributes option