Our client would like to disable the ability to add script tags to RTF fields for all users, or would like a configuration where this can be turned on/off at the environment and potentially, publication and user level.
If we went down the XSLT / schema route, this would be a nightmare to implement and switch on/off, plus if we needed to upgrade later on &c.
Other solutions I can think of are:
- CMS GUI extension that checks the ‘on-save’ of the component
- CMS event system – again checking the ‘on-save’ of the component
- Globally by modifying the ootb default XSLT (I need to research that one a bit)
Just wondering if anyone has also had to implement something similar and had some advice / gotchas that I need to consider.