Problem Ufter Upgrade PB 5.0.2 And 5.0.3
S-D CONSULTING
I report the big problems after upgrading PB from version 5.0.0 to version 5.0.2 and above.
Today, on two websites, as soon as we upgraded, all of our page scripts skipped completely.
Checking the previously built pages, we noticed that PB completely eliminates the iframes with the relative SRC, even in the RAW html addon, where we have "script type="text/javascript", this is completely eliminated, effectively invalidating all the code.
I also point out that on another site, any change is made is not saved.
S-D CONSULTING
Accepted AnswerI want to clarify that by reinstalling the 5.0.1 version all the websites started working again and the scripts and iframes are not deleted
Mehtaz Afsana Borsha
Accepted AnswerHi
Thanks for contacting us. Glad to know that it is working. You can now close this post by accepting the answer.
-Regards.
S-D CONSULTING
Accepted AnswerSorry, but It work only with old version 5.0.1..... but if I upgrade to 5.0.2 or 5.0.3 not work and website is compromised in their script.
I think the problem is in your changelog, where you say " Implemented HTML sanitization in frontend editor to prevent XSS vulnerability".
Is not possible that and update clear all iframe and script. I cannot upgrade all my website???? Is simple iframe of booking and ins code!
S-D CONSULTING
Accepted AnswerAny other answer???
S-D CONSULTING
Accepted AnswerSorry, but I've not any screenshot. As I have write, if I upgrade PB from 5.0.1 to 5.0.2 o 5.0.3, all the scripts inserted in the various addons are modified.
For example, a simple iframe that contains a video (I've already read on the forum that others with this upgrade have the same serious problem), or a booking iframe, this is effectively canceled and cancelled. This happens even though the use of iframes is allowed on the JCE editor. In the RAW html addon, the codes that contain the scripts are cleaned on the first save and in fact this seriously compromises the whole website system.
This solution, in my opinion, comes from that feature you introduced from 5.0.2 that I mentioned in previous comments.
It is not possible for PB to clean up my code that has always worked, because this would mean having to redo all the websites that have worked correctly up to now. You can't be so invasive as to mess up the set code.
Yesterday, I had to restore 3 websites with backups because they all stopped working.