You need to be logged in to post in the forum - Log In

An active JCE Pro Subscription is required to post in the forum - Buy a Subscription

Support is currently Offline

Official support hours
Monday to Friday
09:00 - 17:00 Europe/London (BST)

Please create a new Ticket and we will get back to you as soon as we can.

#112569 How to add JCE File browser to a FLEXIcontent Input?

Posted in ‘Editor’
This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Latest post by Ryan on Monday, 12 December 2022 16:56 GMT

iamrobert
Hi Ryan,

In FLEXIcontent - we can use the JCE image manager for its image field.

The problem is that if you upload an SVG, FLEXIcontent deletes the file because it cannot create a phpThumb. So - there's no way to save it.

So, I wonder if there is any way to trigger the JCE File or Image browser on an input field.

FLEXIcontent input fields have Field attributes - so could we trigger via data attributes (data-jce-image)? Or we can write js to apply the code to the field's id.

I've read these - but am wondering how to apply:


Thanks

Robert

Ryan
The problem is that if you upload an SVG, FLEXIcontent deletes the file because it cannot create a phpThumb. So - there's no way to save it.


I think it would be better here to ask Flexi-Content to add optional support for svg files.

Ryan Demmer

Lead Developer / CEO / CTO

Just because you're not paranoid doesn't mean everybody isn't out to get you.

iamrobert
Hi Ryan,

You're right - but we've been asking for around 3 years:

- https://www.flexicontent.org/forum/20-general-support/57825-jce-media-manager.html#81031

or 8 years:

- https://www.flexicontent.org/forum/21-troubleshooting/52761-svg-on-image-field.html
- https://github.com/FLEXIcontent/flexicontent-cck/issues/140

FLEXIcontent file manager gives a "Possible IE XSS Attack found" message for SVG.

So - I'm stumped.

Ryan
FLEXIcontent file manager gives a "Possible IE XSS Attack found" message for SVG.


Adding support for svg files does carry some risk, as they can be a vector for XSS attacks, which is perhaps why the FlexiContent developers have been reluctant to add it.

Ryan Demmer

Lead Developer / CEO / CTO

Just because you're not paranoid doesn't mean everybody isn't out to get you.