diff --git a/inc/html.class.php b/inc/html.class.php index 6041fa1c3c1..06fed39e73b 100644 --- a/inc/html.class.php +++ b/inc/html.class.php @@ -3548,7 +3548,9 @@ static function initEditorSystem($name, $rand = '', $display = true, $readonly = // init editor tinyMCE.init({ language: '$language', - invalid_elements: 'form,iframe', + invalid_elements: 'form,iframe,script,@[onclick|ondblclick|' + + 'onmousedown|onmouseup|onmouseover|onmousemove|onmouseout|onkeypress|' + + 'onkeydown|onkeyup]', browser_spellcheck: true, mode: 'exact', elements: '$name',