Who is allowed to use which code?
Have you ever wondered why Joomla simply deletes an embedded video (iframe) or JavaScript as soon as you save the article? This is due to the text filters.
Filter Configuration:
In the global configuration under the "Text Filters" tab, you define which user group is allowed to use which HTML tags.
- Super Users: Should usually be set to "No Filtering" so that you as the administrator have full control.
- Registered / Author: A "Default Blacklist" is recommended here to prevent the injection of malicious code by third parties.
Security Note: Be careful with the "No Filtering" setting for lower user groups. This could open a security vulnerability if a user account is compromised.
