HTML fields and text areas

Most content on a page can be created with a text area. HTML fields may be used for embedding HTML or when a specific html tag you need to use is not supported in a text area. You can embed images, files, and views in text areas.

Click Add HTML Field to add a paragraph item that supports advanced html. Click Add Text Area to add a standard, rich text field. 

You can add an unlimited number of text areas and html fields to any flexible page.

 

Warning: embedding content is a security risk.

If you do not know and trust your embedded content provider, you could be opening yourself up to attackers.
For example, if a bad actor (Black hat hacker) were to gain control of the server that stores the content you are embedding they could inject malicious code into your site from that server.

Embedding content in html fields

One use for the full html field is to embed content from third party sites via <iframe>, <video>, <embed>, or other such embed tags.  An alternate way to embed content in a safer way is to add a file type for oembed enabled content.

To add an alternate file type, go to /admin/structure/file-types/add and fill in the appropriate options.  The relevant mime-types are:

  • audio/oembed
  • image/oembed
  • text/oembed
  • video/oembed

Examples of oembed uses

  • Twitter: Embedded tweets from Twitter, for example, would use the text/oembed mime type. Then you will be able to add tweets in the same way you add images via a remote URL.