The sanitize plugin

Patrick M

Hi Everyone,
I had been getting great use out of the plugin "nodebb-plugin-sanitizehtml". I know its unusual for a forum, but I like to allow some html tags so I disable the default HTML sanitization. To prevent JS injections, I've used the plugin "nodebb-plugin-sanitizehtml".

However, for the past couple of months, I have not been able to open the plugin's admin screen to modify the list of tags. This may be because the plugin has not been updated in a couple of years (according to github). Is anyone else experiencing this issue? Is there a solution?

The plugin still appears to be working in the background. For example, it removes the <script> tags and <button> tags while allowing innocent tags like <h3> and allowing inline css styles. I just can't access the admin screen.

Anyone know if there is anything I can do?

Thanks
Patrick

<baris>

Are you getting any errors in the browser console or nodebb logs when you try to access the plugins ACP page?

Patrick M

@baris
Hi Baris, thanks for your quick response. No, I never get an error message. The spinning wheel just keeps going and going until the page eventually just crashes. So I don't really know what to do. I've tried different browsers. The outcome is always the same. What should I try next?

I should specify that I am not on the NodeBB server. I am on an AWS server. The platform and all other plugins are running smoothly. I am on the most recent version of Node.

<baris>

Is this the plugin https://github.com/akhoury/nodebb-plugin-sanitizehtml?

Patrick M

@baris
Yes. That's the plugin I am struggling with.
https://github.com/akhoury/nodebb-plugin-sanitizehtml

Patrick M

@Patrick-M said in The sanitize plugin:

@baris
Yes. That's the plugin I am struggling with.
https://github.com/akhoury/nodebb-plugin-sanitizehtml

I should also specify that I successfully reset the forum after activating the plugin. I am at a loss as to why I cant access the ACP page, even though the app is working in the background. Keeping my fingers crossed that there is a solution.

oplik0

Perhaps try running npm install --force nodebb-plugin-sanitizehtml to force a reinstall from source and rebuild the forum (./nodebb build and ./nodebb restart or just use rebuild and restart button in ACP). Maybe some plugin files are broken for some reason.

julian

Sounds like a rebuild is needed, as @oplik0 recommends

Patrick M

Sorry everyone, the force re-install did not address the issue.

I noticed that an error is being logged in the javascript console when we try to launch the sanitize plugin. See the logged error message by clicking this link (I don't have sufficient reputation to upload the image directly int he post):

https://pluginerrormessage.s3.ca-central-1.amazonaws.com/plugin+error.gif

Does this help diagnose the issue from anyone's perspective?

julian

@Patrick-M What did you do to run a rebuild? When you say re-install, that suggests to me that you didn't run ./nodebb build

Patrick M

@julian said in The sanitize plugin:

What did you do to run a rebuild?

You are right!!! As soon as our Web Dev person did a rebuild from the the command line, it all worked beautifully. It was a communication issue on our end. He thought I was doing the rebuild while I thought he was doing the rebuild.

You've all been so patient with me! Thank you so much for all the help.