Need a way to include scripts and styles in /type/page

[Edward Betts]

/type/page content is sanitized before display, this removes styles and scripts. We need a way to be able to include styles and scripts on pages.

Does this need a new type, or a switch on the page to skip the sanitizer?

[Anand Chitipothu (anandology)]

We can't allow this. It is security risk. People can add javascripts to steal cookies.

I can think of a work-around if can point me to a couple of examples.

[Edward Betts (edwardbetts)]

The example is http://upstream.openlibrary.org/contact/spam

Should we use a different page type? Ask Lance for more details.

[Lance Arthur (lance-arthur)]

Specific to that page (and perhaps there's a more elegant and system-friendly way to do it) we wanted to use Javascript to extract the browser history so we could insert the spammy URL in question inside the form automatically. Then we wondered about using pages when we wanted to or had to use some kind of code to "do something" and perhaps a Private Page or an Internal Page or Admin Page or something might be useful in those situations.

[Anand Chitipothu (anandology)]

On 06-Feb-10, at 2:19 AM, Edward Betts wrote:

> The example is http://upstream.openlibrary.org/contact/spam
>
> Should we use a different page type? Ask Lance for more details.

That should be driven by a template. I've added template and added
code for handling /contact/spam.

Anand

[Anand Chitipothu (anandology)]

> Specific to that page (and perhaps there's a more elegant and system-
> friendly way to do it) we wanted to use Javascript to extract the
> browser history so we could insert the spammy URL in question inside
> the
> form automatically. Then we wondered about using pages when we
> wanted to
> or had to use some kind of code to "do something" and perhaps a
> Private
> Page or an Internal Page or Admin Page or something might be useful in
> those situations.

I've added to code to populate email and url.

For example: http://upstream.openlibrary.org/contact/spam?path=/books/OL1M

Don't you think it will better if we make it a popup?

[George (george-archive)]

Make the form a pop-up, you mean? Why?

Would be perfect if the form could redirect back to the page reported, with a flash confirmation message that says "Thanks for your report. We'll look into it as soon as we can, and if you provided an email address, we'll get back to you if we need to."