Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-42660

Field Label will leave blank in drag and drop container when the Property value is Javascript.

    Details

      Description

      1. Add Documents and Media portlet to home page.
      2. Manage Document Types -> Add a Document Types.
      3. Drag and Drop a type from Property section (for example: Boolean).
      4. Edit Settings of Boolean -> Change the Value of Field Label to <script>alert("123");</script>.
      5. Click Save button.

      Expected result:
      It should be display the JS value instead of blank.

      Actual result:
      JS name is visible in diagram builder drop container and Name Field change to "script_alert123___script" by automatic even though you didn't modify the Name Property value.

        Attachments

        1. attachment.JPG
          attachment.JPG
          133 kB
        2. fixed.png
          fixed.png
          33 kB

          Issue Links

            Activity

              People

              • Assignee:
                hong.zhao Hong Zhao
                Reporter:
                he.song Serena Song (Inactive)
                Participants of an Issue:
                Recent user:
                Esther Sanz
              • Votes:
                0 Vote for this issue
                Watchers:
                2 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:
                  Days since last comment:
                  5 years, 19 weeks ago

                  Packages

                  Version Package
                  6.2.2 CE GA3
                  6.2.X EE
                  7.0.0 M1