ICEfaces
  1. ICEfaces
  2. ICE-5745

Allow <ice:message(s)> component to display HTML tags

          Details

          • Type: Improvement Improvement
          • Status: Open
          • Priority: Major Major
          • Resolution: Unresolved
          • Affects Version/s: 1.8.2-EE-GA, 1.8.2-EE-GA_P01
          • Fix Version/s: None
          • Component/s: ICE-Components
          • Labels:
            None
          • Environment:
            ICEfaces EE only

            Description

            Due to the changes made for ICE-4699, the <ice:messages> component will no longer display HTML tags.

              Activity

              Hide
              Permalink
              Ted Goddard added a comment -

              Adding an escape="false" attribute ("true" being the default) would allow applications to provide HTML content in messages.

              This would retain the default security features of the messages component. Note that with escape="false", the application becomes responsible for protection against cross-site scripting attacks via messages.

              Show
              Ted Goddard added a comment - Adding an escape="false" attribute ("true" being the default) would allow applications to provide HTML content in messages. This would retain the default security features of the messages component. Note that with escape="false", the application becomes responsible for protection against cross-site scripting attacks via messages.

                People

                • Assignee:
                  Unassigned
                  Reporter:
                  Arran Mccullough
                • Votes:
                  0 Vote for this issue
                  Watchers:
                  0 Start watching this issue

                  Dates

                  • Created:
                    Updated: