Details
-
Type:
Improvement
-
Status: Open
-
Priority:
Major
-
Resolution: Unresolved
-
Affects Version/s: 1.8.2-EE-GA, 1.8.2-EE-GA_P01
-
Fix Version/s: None
-
Component/s: ICE-Components
-
Labels:None
-
Environment:ICEfaces EE only
-
ICEsoft Forum Reference:
Description
Due to the changes made for ICE-4699, the <ice:messages> component will no longer display HTML tags.
Activity
Field | Original Value | New Value |
---|---|---|
Salesforce Case | [5007000000C3Lqe] |
Adding an escape="false" attribute ("true" being the default) would allow applications to provide HTML content in messages.
This would retain the default security features of the messages component. Note that with escape="false", the application becomes responsible for protection against cross-site scripting attacks via messages.