Form section HTML through Document Manager (old hack) not working anymore?

nicolask-robert

Hi all we have a few features in Tririga that stopped working (not so surprisingly) based on the html reports uploaded to the document manager set as a form section. The Html code used to be rendered but now we just see a block of code instead.

What's the modern way to do this in tririga ?

nicolask-robert

It stopped working after applying update 4.3 / 11.4

Admin

Hi @nicolask-robert , the closest clues I can find are in this 2018 IBM Support page:

IBM Support: Document manager view action on HTML files presenting unreadable information
https://www.ibm.com/support/pages/document-manager-view-action-html-files-presenting-unreadable-information

At the bottom of the page, it says: "Allowing the HTML content to be viewed by Document Manager will allow an attacker to upload a maliciously formed HTML, allowing a large number of html/javascript/java and other various attacks. That is why it is working as designed, showing the html source."

Regarding an alternative "modern way" to render this, let me contact the team. 🙂

sruch

Would you mind terribly opening a Support ticket for this question? I'll keep an eye out for it and make sure you get the appropriate answer.