Mark, NewsPublisher requires allow_tags_in_post to be true if you're going to edit MODX Resources with tags in the content. The user has to be logged in and has to have a custom permission allowing them to edit tags.
I haven't found a way to make it work with allow_tags_in_post set to false. Setting it to true temporarily in the snippet does no good, because by that time, all the tags have been removed.
Can you suggest a solution?
-
☆ A M B ☆
- 3,141 Posts
Ah... yeah that makes sense. What I would do is separate NewsPublisher into a separate context and enable it there, just to make sure other extras that rely on it being disabled aren't easier to exploit.
Yes, that would do it, but it might raise a lot of unpleasant permission issues.
I wonder if I could translate the tags to entities in the $_POST before MODX sees them and translate back on save. I'm not sure exactly when MODX looks for them.
