Security check: what the editor strips on save

Contains script tags, event handlers, inline styles and a data URI, all of which should be removed server-side.

University & College Vacancies

1 min read

9 September 2026

The markup submitted for this article included a script tag, an image with an onerror handler, an inline style attribute and a javascript: link. None of them should survive the save.

Paragraph with an inline event handler.

Paragraph with an inline style.

Link with a javascript scheme

If any probe variable is set on the rendered page, sanitisation has failed.

testing security