[jira] [Created] (OFBIZ-12147) Allow Unsafe Message

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

[jira] [Created] (OFBIZ-12147) Allow Unsafe Message

Nicolas Malin (Jira)
James Yong created OFBIZ-12147:
----------------------------------

             Summary: Allow Unsafe Message
                 Key: OFBIZ-12147
                 URL: https://issues.apache.org/jira/browse/OFBIZ-12147
             Project: OFBiz
          Issue Type: Improvement
          Components: base
    Affects Versions: Upcoming Branch
            Reporter: James Yong
            Assignee: James Yong
             Fix For: Upcoming Branch


Currently, we can display flash message by setting in request attribute "_EVENT_MESSAGE_".
Propose to add another request attribute i.e. '_UNSAFE_EVENT_MESSAGE_' for messages that  can contain inline javascript.

One use case is to allow us to display last login timestamp with browser-specific format.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)