vwiki

User Tools

Site Tools

Trace: • apache_camel • datachecker • apache_spark • thingsboard • apache_zeppelin_documentation • pilot • checking_getapp • mdms • rm0 • rm31431
rm31431

Table of Contents

rm31431 XSS[Security]: Implement Tooltip-Plugin in all UI components

TODO

  • Replace following JS components in all processes (this means after the change no )
    • TextFieldQTip
    • ComboboxQTip
    • DisplayFieldQTip
  • XSS prevention (should work, but test it first!)
  • Remove all calls to “cutVisibleContent()” (also check if the after the remove all is OK)

Replace *QTip components

  • Replace TextFieldQTip with Ext.form.field.Text and plugins: ['tooltipellipsis'],
    • TextFieldQTip
    • xtype: 'textfieldqtip' with xtype: 'textfield'
  • Replace DisplayFieldQTip with Ext.form.DisplayField and plugins: ['tooltipellipsis'],
  • Replace ComboboxQTip with Ext.form.ComboBox and plugins: ['tooltipellipsis'],
    • ComboboxQTip
    • xtype: 'comboboxqtip' with xtype: 'combobox'

Keep in mind for review

  • NcrDetailsFunctions
    • :23 textfieldqtip ⇒ textfield, combo doesn't work, textfield declared twice etc…
  • SASAddressWindow
    • validValueTipHandler removed (the flag was not used)
rm31431.txt · Last modified: by kalaschnikow