CiviCRM Community Forums (archive)

Hi all,

I want to put a dojo pop-up in a profile "field help" field but I get "Illegal characters in input (potential scripting attack)". If I can't use a pop-up, the field help being offered, definitions of check-box choices, will take up a lot of real estate, which I can do, but would prefer a mouseover/mouseout pop-up. I've put such a dojo pop-up in a Drupal block and it works nicely. I suspect that this validation is useful for actual input fields that are available to the public, but this is just editing the field help that only I as admin can do. Is there a way I can accomplish this?

Hi Donald,

It looks like the field, help_post, is in the list. That's the one, right? That's what the page source for the edit profile field page says. Not really understanding what's going on in the Config.IDS.ini file, I tried changing that line from

    html[]              = help_postto
    exceptions[]              = help_post
That didn't do it. I tried taking the line out all together. That didn't do it. I took the advice in
http://forum.civicrm.org/index.php/topic,7614.0.html
and also edited CRM/Core/IDS.php. Nope.

Is there some cache clearing needed after editing the file(s)?

The goddess gave up. Should I? Sure would be nice to be able to do this somehow.