After updating to version 1.21 not able to use editor nor update the Shop settings. ERROR blank page with message "XSS attempt."

You should test your updates before upload.

Regards

Hermann
Sunday, December 27 2015, 02:29 AM
Share this post:
Responses (6)
  • Accepted Answer

    Sunday, December 27 2015, 01:30 PM - #Permalink
    Same for me. Cannot edit and save products. Need fix urgently please.
    The reply is currently minimized Show
  • Accepted Answer

    Sunday, December 27 2015, 09:06 PM - #Permalink
    It must be a securetyproblem. The system is blocking the acces to the database if you edit a product.
    The reply is currently minimized Show
  • Accepted Answer

    Sunday, December 27 2015, 09:44 PM - #Permalink
    I've found a temporary solution to avoid this message:

    File: system/library/security.php

    Line: 120 change to this:

    if (preg_match('#<[^>]*\w*\"?[^>]*>#is', $uri, $match)) {
    // return true;
    return false;
    The reply is currently minimized Show
  • Accepted Answer

    Monday, December 28 2015, 12:24 AM - #Permalink
    It seems we've increased the security settings too much in 1.2.1 version :( Here you have the fix guys: https://github.com/arastta/arastta/commit/17c9f5aa7492b8e0845739687256c2a445deab6c
    Like
    1
    The reply is currently minimized Show
  • Accepted Answer

    Tuesday, December 29 2015, 09:19 PM - #Permalink
    thank-you denis,
    that worked

    this message was driving me crazy

    i am testing Arastta on a local server, so i thought i was attacking myself :D
    The reply is currently minimized Show
  • Accepted Answer

    Sunday, January 03 2016, 06:00 PM - #Permalink
    Go settings->option->Text Editor (Admin)
    Change editor from Summernote to TinyMCE and it works
    The reply is currently minimized Show
Your Reply