Uploaded image for project: 'OFBiz'
  1. OFBiz
  2. OFBIZ-12147

Allow Unsafe Event Message

    XMLWordPrintableJSON

    Details

    • Type: Improvement
    • Status: Closed
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: Upcoming Branch
    • Fix Version/s: Upcoming Branch
    • Component/s: base
    • Labels:
      None

      Description

      Currently, we can display flash message by setting in request attribute "_EVENT_MESSAGE_".
      Propose to add another request attribute i.e. "_UNSAFE_EVENT_MESSAGE_" for messages that can contain inline javascript.

      One use case is to allow us to display last login timestamp with browser-specific format.

        Attachments

        1. OFBIZ-12147
          4 kB
          James Yong

          Issue Links

          relates to

          Improvement - An improvement or enhancement to an existing feature or task. OFBIZ-12148 Display last-visited-time popup after login

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Patch Available

            Activity

              People

              • Assignee:
                jamesyong James Yong
                Reporter:
                jamesyong James Yong
              • Votes:
                0 Vote for this issue
                Watchers:
                4 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: