Quantcast
Channel: SmartClient Forums
Viewing all articles
Browse latest Browse all 4756

Question about sanatizing RichTextItem input

$
0
0
SmartGWT 3.1 pro. Firefox, Windows 7.

Per the documentation here http://www.smartclient.com/smartgwt/...extEditor.html you state that "The HTML generated from this component may vary by browser, and, as with any HTML value created on the client, we recommend values be sanitized on the server before storing and displaying to other users."

We were interested in investigating using the RichTextItem in a dynamic form for users to write RichText and be able to save and view it from the database. Since we are using the SmartGWT pro server side databinding features (SQLDataSource, ds.xmls etc.) does that handle the sanitation for us in the same way that it automatically sanitizes SQL injection attacks? If not, do you have a recommended approach for storing and displaying RichText generated with the RichTextItem in a DynamicForm?

Viewing all articles
Browse latest Browse all 4756

Trending Articles