I'm trying to embed a video using jsplayer and I noticed that OSTicket stripes any <script> tags. Is there an option to allow <script> tags? I checked but didn't see any.

    The only way is to modify the default options in Redactor:

    Redactor.opts.removeScript = false

    Haven't checked whether there will be serverside cleaups as well, but that's a start. Best to try and keep such modifications far away from core through, and be specific where this is overridden. You don't want end users injecting javascript code into your helpdesk...

    devadi_dev

    I would not recommend doing this as you'll potentially open yourself up to XSS and other vulnerabilities.

    Cheers.

    Write a Reply...