Forum Discussion

sateesh999's avatar
sateesh999
Contributor
6 years ago

test

"><img src=x onerror=prompt(/securitytesting/)>
Parshant's avatar
Parshant
Boss

Test Passed 😀.

sateesh999's avatar
sateesh999
Contributor
6 years ago

Hi Prashanth,

Could you please provide a stepwise process to integrate how to Implement Validation in my TinyMCE text area through FreeMarker?

 

Thanks,

Sateesh.

  • Parshant's avatar
    Parshant
    Boss
    6 years ago

    sateesh999, there is no need to Implement validation in TinyMCE, The data extract from TinyMCE is already prevented from XSS.

    When you are not using any OOB component, and using cistomization anywhere to display data then only you need to check data for auto-escaping and output formats for XSS in freemarker.

    • sateesh999's avatar
      sateesh999
      Contributor
      6 years ago

      Thanks for your response Prashanth,

      Ok, I understand, but I have gone through the "start a discussion" button in Koros and entered a few sample script like ["><img src=x onerror=prompt(/securitytesting/)>"] It has not allowed the script and throwing error message also.

      The same thing I need in our community, I tried it in Studio on the community platform but very limited options are provided.
      How can I get that error message for the text area?

      Thanks,

      Sateesh.