Announcement

Collapse
No announcement yet.
X
  • Filter
  • Time
Clear All
new posts

    Timeline show NameField as EscapeHTML

    I have a timeline in which the fields are transformed as shown in the example below. There is also a Calendar Event in which the title field can have the value "<b>test</b> jr <img src=foobar onerror='alert(123);'>". How do I make this event display its escapeHTML = true in the timeline?

    Code:
    tasksLine = new Timeline();
    tasksLine.setNameField(CONSTANT.TITLE);
    tasksLine.setDescriptionField(CONSTANT.HTMLTEXT);
    tasksLine.setStartDateField(CONSTANT.BEGINNING_DATE);
    tasksLine.setEndDateField(CONSTANT.DUE_DATE);
    Code:
    CalendarEvent
    {
    "htmlText": "<b>test</b> jr",
    "title": "<b>test</b> jr <img src=foobar onerror='alert(123);'>",
    "beginningDate": "2020.11.22 23:00:00",
    "dueDate": "2020.11.26 22:59:59"
    }

    #2
    Have you already tried the escapeHTML property that is available on DataSourceField? If not, please try that - otherwise, please let us know whether it seems to be inapplicable or doesn't seem to be working.

    Comment


      #3
      jes, my DataSource title field contains escapeHTML = true

      Comment


        #4
        You will need to test this out with the latest patched build of whatever version you are using, and then report the product, version and build date.

        Comment

        Working...
        X