With the breaking change of 6.7.4 (2024-03-24) the K_ALLOWED

The alternative configuration file offer this: <div class="Box B

missing Documentation on K_ALLOWED_TCPDF_TAGS about tcpdf HOT 2 OPEN

THenkeDE commented on June 26, 2024

missing Documentation on K_ALLOWED_TCPDF_TAGS

from tcpdf.

Comments (2)

d-javu commented on June 26, 2024

The alternative configuration file offer this:

TCPDF/examples/config/tcpdf_config_alt.php

Lines 215 to 221 in 82fc97b

    
           /** 
        
            * List of TCPDF methods that are allowed to be called using HTML syntax. 
        
            * Note: each method name must end with surrounded with | (pipe) character. 
        
            * The constant K_TCPDF_CALLS_IN_HTML must be set to true. 
        
            * IMPORTANT: For security reason, disable this feature if you are allowing user HTML content. 
        
            */ 
        
           define('K_ALLOWED_TCPDF_TAGS', '|AddPage|Rect|SetDrawColor|write1DBarcode|');

from tcpdf.

THenkeDE commented on June 26, 2024

well yes, i should have mentioned that i looked it up, too.

But i still think that an example that shows how a "BREAKING CHANGE" should be used should not rely on a slightly "hidden" configuration override.

A note inside the example with a reference to the tcpdf_config_alt.php configline would've done the job.

Configurations of such a major change should not be hidden under the radar like this.

Anyhow, thanks for reply and reminding myself of beeing a little more into detail.

from tcpdf.

missing Documentation on K_ALLOWED_TCPDF_TAGS about tcpdf HOT 2 OPEN

Comments (2)

Related Issues (20)

Recommend Projects

React

Vue.js

Typescript

TensorFlow

Django

Laravel

D3

Recommend Topics

javascript

web

server

Machine learning

Visualization

Game

Recommend Org

Facebook

Microsoft

Google

Alibaba

D3

Tencent

	/**
	* List of TCPDF methods that are allowed to be called using HTML syntax.
	* Note: each method name must end with surrounded with \| (pipe) character.
	* The constant K_TCPDF_CALLS_IN_HTML must be set to true.
	* IMPORTANT: For security reason, disable this feature if you are allowing user HTML content.
	*/
	define('K_ALLOWED_TCPDF_TAGS', '\|AddPage\|Rect\|SetDrawColor\|write1DBarcode\|');