====== rm31431 XSS[Security]: Implement Tooltip-Plugin in all UI components ====== * [[https://cust-projects.seeburger.de/redmine/issues/31431|rm31431 XSS[Security]: Implement Tooltip-Plugin in all UI components]] ===== TODO ===== * Replace following JS components in all processes (this means after the change no ) * TextFieldQTip * ComboboxQTip * DisplayFieldQTip * XSS prevention (should work, but test it first!) * Remove all calls to "cutVisibleContent()" (also check if the after the remove all is OK) ==== Replace *QTip components ==== * Replace ''TextFieldQTip'' with ''Ext.form.field.Text'' and ''plugins: ['tooltipellipsis'],'' * ''TextFieldQTip'' * ''xtype: 'textfieldqtip''' with ''xtype: 'textfield''' * Replace ''DisplayFieldQTip'' with ''Ext.form.DisplayField'' and ''plugins: ['tooltipellipsis'],'' * Replace ''ComboboxQTip'' with ''Ext.form.ComboBox'' and ''plugins: ['tooltipellipsis'],'' * ''ComboboxQTip'' * ''xtype: 'comboboxqtip''' with ''xtype: 'combobox''' ==== Keep in mind for review ==== * NcrDetailsFunctions * :23 textfieldqtip => textfield, combo doesn't work, textfield declared twice etc... * SASAddressWindow * ''validValueTipHandler'' removed (the flag was not used)