OroCRM Forums

Covering OroCRM topics, including community updates and company announcements.

Forums › Forums › OroCRM › OroCRM – Security › HTML not escaped in custom fields

This topic contains 0 replies, has 1 voice, and was last updated by  Damien LE TROHER 10 years, 6 months ago.

Starting from March 1, 2020 the forum has been switched to the read-only mode. Please head to StackOverflow for support.

  • Creator
    Topic
  • October 4, 2013 at 7:31 am #27958

    Damien LE TROHER
    Participant

    Hi again,

    When I add some HTML in a custom text field (tried on contact form), it is not escaped… I can add something like

    It break the page ;).

    Damien LE TROHER
    SYNOLIA – Division Ecommerce

  • Creator
    Topic

The forum ‘OroCRM – Security’ is closed to new topics and replies.

Back to top