Uploaded image for project: 'OFBiz'
  1. OFBiz
  2. OFBIZ-12147

Allow Unsafe Event Message

Attach filesAttach ScreenshotVotersWatch issueWatchersCreate sub-taskLinkCloneUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Closed
    • Minor
    • Resolution: Fixed
    • 22.01.01
    • None
    • base
    • None

    Description

      Currently, we can display flash message by setting in request attribute "_EVENT_MESSAGE_".
      Propose to add another request attribute i.e. "_UNSAFE_EVENT_MESSAGE_" for messages that can contain inline javascript.

      One use case is to allow us to display last login timestamp with browser-specific format.

      Attachments

        Issue Links

        Activity

          This comment will be Viewable by All Users Viewable by All Users
          Cancel

          People

            jamesyong James Yong
            jamesyong James Yong
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Slack

                Issue deployment