drupal-text-formats-editors

Standardizing text formats means creating a single HTML format with aligned CKEditor button sets and allowed tags. Configure one format in Drupal, mirror its permitted HTML tags in the editor toolbar, restrict user access to format switching, and validate settings using the provided validation script to ensure consistency across all authors.

Allowed tags define which HTML elements users can save; CKEditor buttons control which formatting options appear in the editor. Mismatched settings create confusion—users see buttons for tags they cannot save, or vice versa. Alignment ensures the editor surface reflects actual permissions, preventing failed submissions and support requests.

Control format access through Drupal's permission system and text format administration. Assign specific formats to user roles, hide unused formats from the format selector, and document the mandated format in authoring guidelines. Validation ensures no role accidentally retains access to deprecated formats.

Inconsistent formats can expose XSS vulnerabilities if some formats allow dangerous tags while others restrict them. Authors may bypass intended safeguards by switching formats, or malicious markup may slip through unvalidated editor configurations. Standardization on a single audited format eliminates these divergence risks.

This Skill enforces one mandated HTML format site-wide. If your site requires different HTML rules per content type, you'd need separate formats per type and corresponding access controls. The validation script confirms alignment within your chosen standardization scope, not across multiple formats.

Use the provided validation script ./ai/scripts/validate-text-formats.sh to test your configuration. It checks that CKEditor button sets match allowed tags, permissions are correctly scoped, and no format-switching loopholes exist. Run it after any configuration change to confirm standardization is maintained.