Uploaded image for project: 'Magnolia UI'
  1. Magnolia UI
  2. MGNLUI-5337

Notifications and alerts should support HTML content

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Not an issue
    • Icon: Neutral Neutral
    • 6.1.3, 6.2
    • 6.1
    • admincentral
    • None

      Notifications and alerts often contain HTML formatted text. Currently this seems not to be always supported by Magnolia (IIRC, Vaadin now disallows html content by default for security reasons). See attachment. More examples can be found in the two tickets linked as duplicate.

      After proper text sanitisation on the server side, it should be safe to allow HTML content. Sanitisation is important here because the text displayed may partly come from the client and contain malicious executable code.

       

      See info.magnolia.ui.AlertBuilder and info.magnolia.admincentral.ResurfaceShell#openNotification (for legacy notifs)

        Acceptance criteria

          1. html-code-shows.png
            html-code-shows.png
            88 kB

              asiska Adam Siska
              fgrilli Federico Grilli
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated:
                Resolved:

                  Bug DoR
                  Task DoD