topic Re: Improper server validation in Alfresco Data list when new item is created in Alfresco Forum

Improper server validation in Alfresco Data list when new item is created

Balaji123 — Fri, 27 Dec 2019 06:49:34 GMT

Hi,

We have created the custom datalist in alfresco by using model properties. I don't want to insert any '<script >' tag in datalist while inserting a item. I want to prevent the script related tags or any script to be shown in datalist. This is considered as security violation. So how can i resolve this issue. Please find below screen shot for better understanding.

Re: Improper server validation in Alfresco Data list when new item is created

kintu_barot — Thu, 02 Jan 2020 13:46:53 GMT

You could use the REGEX constraint for the property field of the datalist.

Have a look at the below link, it has the example of REGEX implemented in the content model. The same can be implemented for the datalist as well. You just need to find a valid expression for your constraint.

https://docs.alfresco.com/6.1/references/dev-extension-points-content-model-define-and-deploy.html