Input descriptions can contain html tags - allow or prevent

XMLWordPrintable

    • Type: Bug
    • Resolution: Fixed
    • Priority: Major
    • Component/s: blueocean-plugin
    • None
    • pannonian, iapetus

      you will find markup in the description of the last parameter

       <br/><strong>NOTE:</strong> Uses the above BLUEOCEAN_BRANCH_NAME to determine the upstream build Job name fr
      

      Maybe we want to allow to use markdown instead and parse the description before display. That would give a lot of power to the user.

      The problem with allowing html directly is XSS (Cross-site Scripting)

            Assignee:
            Tom FENNELLY
            Reporter:
            Thorsten Scherler
            Votes:
            0 Vote for this issue
            Watchers:
            6 Start watching this issue

              Created:
              Updated:
              Resolved: