test
"><img src=x onerror=prompt(/securitytesting/)>
Forum Discussion
sateesh999, there is no need to Implement validation in TinyMCE, The data extract from TinyMCE is already prevented from XSS.
When you are not using any OOB component, and using cistomization anywhere to display data then only you need to check data for auto-escaping and output formats for XSS in freemarker.
Thanks for your response Prashanth,
Ok, I understand, but I have gone through the "start a discussion" button in Koros and entered a few sample script like ["><img src=x onerror=prompt(/securitytesting/)>"] It has not allowed the script and throwing error message also.
The same thing I need in our community, I tried it in Studio on the community platform but very limited options are provided.
How can I get that error message for the text area?
Thanks,
Sateesh.
