Forum Discussion

sateesh999's avatar
sateesh999
Contributor
6 years ago

test

"><img src=x onerror=prompt(/securitytesting/)>
Parshant's avatar
Parshant
Boss
6 years ago

Test Passed 😀.

  • sateesh999's avatar
    sateesh999
    Contributor
    6 years ago

    Hi Prashanth,

    Could you please provide a stepwise process to integrate how to Implement Validation in my TinyMCE text area through FreeMarker?

     

    Thanks,

    Sateesh.

    • Parshant's avatar
      Parshant
      Boss
      6 years ago

      sateesh999, there is no need to Implement validation in TinyMCE, The data extract from TinyMCE is already prevented from XSS.

      When you are not using any OOB component, and using cistomization anywhere to display data then only you need to check data for auto-escaping and output formats for XSS in freemarker.

      • sateesh999's avatar
        sateesh999
        Contributor
        6 years ago

        Thanks for your response Prashanth,

        Ok, I understand, but I have gone through the "start a discussion" button in Koros and entered a few sample script like ["><img src=x onerror=prompt(/securitytesting/)>"] It has not allowed the script and throwing error message also.

        The same thing I need in our community, I tried it in Studio on the community platform but very limited options are provided.
        How can I get that error message for the text area?

        Thanks,

        Sateesh.