Use a UI lib for HTML sanitizing instead just htmlEncode

XMLWordPrintable

    • High
    • None
    • Use a more sophisticated UI lib for HTML sanitising instead just encoding it.
    • None

      Problem

      With several changes to prevent XSS with plain htmlEncode several places where HTML should be allowed in the UI valid HTML is also escaped. 

      Multiple examples: 

      • The message box toast messages
      • The rendered comments in the tooltip over the segment grid

      solution

      Include a more sophisticated  UI lib to sanitize HTML instead just escape it.

            Assignee:
            Thomas Lauria
            Reporter:
            Thomas Lauria
            None
            None
            Axel Becher, Sanya Mikhliaiev
            None
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved:
              None
              None