Answers.Body: <p>I <em>think</em> that you have a <strong>browser plugin</strong> installed which is interfering with CiviCRM. </p>
  
  <p>For example, <a href="https://stackoverflow.com/questions/25308339/ckedtitor-adds-chrome-hdv-content-hdv-js-text-to-source">this page</a> suggests that it may be a Firefox addon called "YouTube Auto HD". </p>
  
  <h3>Troubleshooting</h3>
  
  <p>For troubleshooting purposes, I'd suggest trying each of these to gain more info:</p>
  
  <ul>
  <li>Try with a different web browser (i.e. Chrome vs Firefox).</li>
  <li>Try the same browser, but with all extensions/plugins/addons disabled.</li>
  <li>Try clearing your browser cache.</li>
  </ul>
  
  <h3>Diagnosing</h3>
  
  <p>Hopefully the above steps allow you to learn more about the root cause of the problem. So if disabling all your browser plugins did the trick then you could try disabling them one-by-one to find the culprit. </p>
  
  <h3>Fixing</h3>
  
  <p><em>Then</em> if you do find that one plugin is giving you trouble with CiviCRM <em>and</em> keeping that plugin installed is important, then I'd suggest either:</p>
  
  <ul>
  <li>contacting the plugin author to complain about its behavior</li>
  <li>finding a suitable replacement plugin that doesn't have the problem</li>
  </ul>
  
  <p>In theory you <em>could</em> <a href="https://civicrm.org/bug-reporting" rel="nofollow noreferrer">submit a bug report</a> to CiviCRM, but given the behavior you've described, I think it's unlikely that we'd be able to easily change CiviCRM to make it compatible with a browser plugin like this.</p>
  
Answers.ContentLicense: CC BY-SA 3.0
Answers.CreationDate: 2017-09-16T06:46:14.673Z
Answers.Text: Thanks. This was a while ago. I never did get to the bottom of it, but the issue has since disappeared.
Answers.UserDisplayName: Jern
Answers.ContentLicense: CC BY-SA 3.0
Answers.CreationDate: 2017-09-14T15:24:27.660Z
Answers.LastActivityDate: 2017-09-14T15:24:27.660Z
Answers.UserDisplayName: Sean
Answers.Body: <p>The problem has appeared again, so I checked the page source. In the email signature field (which appears blank), there is:</p>
  
  <pre><code>&lt;p&gt;  &lt;br&gt;&lt;/p&gt;&lt;!--{cke_protected}%3Cscript%20charset%3D%22UTF-8%22%20src%3D%22chrome%3A%2F%2Fhdv%2Fcontent%2Fhdv.js%22%20type%3D%22application%2Fjavascript%22%3E%3C%2Fscript%3E--&gt;
  </code></pre>
  
  <p>Anyone know where this comes from, and if it could be cause the "illegal characters" error? Thanks.</p>
  
Answers.ContentLicense: CC BY-SA 3.0
Answers.CreationDate: 2016-03-22T11:43:35.830Z
Answers.LastActivityDate: 2016-03-22T11:43:35.830Z
Answers.UserDisplayName: Jern
Body: <p>For some reason we sometimes get an error when trying to save contact information after editing. An error pop-up appears with <b>Illegal characters in input (potential scripting attack)</b> when trying to save. It turns out that this can be solved by deleting the contents of the Email signature field (even though there are no visible contents). So I assume that there must be some invisible character in this field, but how did it get there (we never use this field)? And how can I suppress the signature field, so that this problem doesn't happen again? Thanks.</p>
  
  <p>Edit: Civi 4.7.3 (but also happened in earlier versions). Joomla 3.4.8. MySQL 5.5.47 PHP 5.6.18 Centos 6.6.</p>
  
Comments.ContentLicense: CC BY-SA 3.0
Comments.CreationDate: 2016-03-04T15:57:39.497Z
Comments.Text: What is your version of CiviCRM, and what platform are you on?
Comments.UserDisplayName: JohnFF
Comments.ContentLicense: CC BY-SA 3.0
Comments.CreationDate: 2016-03-05T01:50:32.820Z
Comments.Text: I'm confused by deleting the contents when there are no visible contents. What are the contents that are not visible?
Comments.UserDisplayName: JohnFF
Comments.ContentLicense: CC BY-SA 3.0
Comments.CreationDate: 2016-03-05T08:11:44.147Z
Comments.Text: I don't know. It doesn't show up in the HTML source as far as I can see. Maybe a character coding effect? If I select the field, select all and delete, then the form saves OK without the error. I will look more closely next time it happens. Part of my reason for posting was so that if anyone else has this problem, they would look at the signature field - it took us quite a while to identify that this was the field causing the problems.
Comments.UserDisplayName: Jern
Comments.ContentLicense: CC BY-SA 3.0
Comments.CreationDate: 2016-03-08T17:32:31.277Z
Comments.Text: If there are mystery characters there that you can actually select and copy (Ctrl-A Ctrl-C), and you're using Linux (and have the hexdump command), you could do something like echo -n "<paste them here>" | hexdump -C to find out exactly what characters they are. Just out of interest, doesn't tell you where they came from though. This helped me find UTF-8 apostrophes in someone's username once- they had been doing a password reset every day!
Comments.UserDisplayName: DaveFF
Tags: <contacts>
Title: Illegal characters in email signature field
ThreadText: # Illegal characters in email signature field
  
  (Asked by: username_0 on 2016-03-04)
  
  For some reason we sometimes get an error when trying to save contact information after editing. An error pop-up appears with **Illegal characters in input (potential scripting attack)** when trying to save. It turns out that this can be solved by deleting the contents of the Email signature field (even though there are no visible contents). So I assume that there must be some invisible character in this field, but how did it get there (we never use this field)? And how can I suppress the signature field, so that this problem doesn't happen again? Thanks.
  
  Edit: Civi 4.7.3 (but also happened in earlier versions). Joomla 3.4.8. MySQL 5.5.47 PHP 5.6.18 Centos 6.6.
  
  **Tags:** contacts
  
  > **Comments:**
  > **username_1**: What is your version of CiviCRM, and what platform are you on?  
  > **username_1**: I'm confused by deleting the contents when there are no visible contents. What are the contents that are not visible?  
  > **username_0**: I don't know. It doesn't show up in the HTML source as far as I can see. Maybe a character coding effect? If I select the field, select all and delete, then the form saves OK without the error. I will look more closely next time it happens. Part of my reason for posting was so that if anyone else has this problem, they would look at the signature field - it took us quite a while to identify that this was the field causing the problems.  
  > **username_2**: If there are mystery characters there that you can actually select and copy (Ctrl-A Ctrl-C), and you're using Linux (and have the hexdump command), you could do something like echo -n "<paste them here>" | hexdump -C to find out exactly what characters they are. Just out of interest, doesn't tell you where they came from though. This helped me find UTF-8 apostrophes in someone's username once- they had been doing a password reset every day!  
  
  ---
  
  ## 2 answers
  
  ### Answer by username_3 on 2017-09-14. Score: 1
  
  I *think* that you have a **browser plugin** installed which is interfering with CiviCRM.
  
  For example, [this page](https://stackoverflow.com/questions/25308339/ckedtitor-adds-chrome-hdv-content-hdv-js-text-to-source) suggests that it may be a Firefox addon called "YouTube Auto HD".
  
  ### Troubleshooting
  
  For troubleshooting purposes, I'd suggest trying each of these to gain more info:
  
  * Try with a different web browser (i.e. Chrome vs Firefox).
  * Try the same browser, but with all extensions/plugins/addons disabled.
  * Try clearing your browser cache.
  
  ### Diagnosing
  
  Hopefully the above steps allow you to learn more about the root cause of the problem. So if disabling all your browser plugins did the trick then you could try disabling them one-by-one to find the culprit.
  
  ### Fixing
  
  *Then* if you do find that one plugin is giving you trouble with CiviCRM *and* keeping that plugin installed is important, then I'd suggest either:
  
  * contacting the plugin author to complain about its behavior
  * finding a suitable replacement plugin that doesn't have the problem
  
  In theory you *could* [submit a bug report](https://civicrm.org/bug-reporting) to CiviCRM, but given the behavior you've described, I think it's unlikely that we'd be able to easily change CiviCRM to make it compatible with a browser plugin like this.
  
  > **Comments:**
  > **username_0**: Thanks. This was a while ago. I never did get to the bottom of it, but the issue has since disappeared.  
  
  ---
  
  ### Answer by username_0 on 2016-03-22. Score: 0
  
  The problem has appeared again, so I checked the page source. In the email signature field (which appears blank), there is:
    
  
  Anyone know where this comes from, and if it could be cause the "illegal characters" error? Thanks.
  
  
  ---
  
  