On Fri, Aug 05, 2011 at 10:18:17PM +0200, Christian Loos wrote: > Am 05.08.2011 17:03, schrieb Thomas Sibley: > > Ah, much more clear. For security, RT only allows certain HTML when > > displaying content inline with the ticket history. What you're seeing > > is that RT has stripped the tables from your message for inline display. > > There are answers in the list archives and maybe the wiki for how to > > modify ScrubHTML to allow tables inline, although that code has changed > > a little from 3.8 → 4.0. > > By the way is there any reason why RT doesn't allow by default HTML > table elements?
It becomes really trivial to fake ticket history unless we're really careful. The real solution is not the scrubber, but something that actually parses the html mail. -kevin
pgpYhCHiLA9ON.pgp
Description: PGP signature
-------- 2011 Training: http://bestpractical.com/services/training.html
