Use a UI lib for HTML sanitizing instead just htmlEncode

XMLWordPrintable

    • Type: Bug
    • Resolution: Unresolved
    • None
    • Affects Version/s: None
    • Component/s: Editor general
    • High
    • ON RELEASE / ROLL OUT: test availability of new JS files!
    • Use a more sophisticated UI lib for HTML sanitising instead just encoding it.

      Problem

      With several changes to prevent XSS with plain htmlEncode several places where HTML should be allowed in the UI valid HTML is also escaped. 

      Multiple examples: 

      • The message box toast messages
      • The rendered comments in the tooltip over the segment grid

      solution

      Include a more sophisticated  UI lib to sanitize HTML instead just escape it.

            Assignee:
            Thomas Lauria
            Reporter:
            Thomas Lauria
            Axel Becher, Sanya Mikhliaiev
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated: