Improper server validation in Alfresco Data list when new item is created

[Balaji123]

Hi,

We have created the custom datalist in alfresco by using model properties. I don't want to insert any '<script >' tag in datalist while inserting a item. I want to prevent the script related tags or any script to be shown in datalist. This is considered as security violation. So how can i resolve this issue. Please find below screen shot for better understanding. 

[kintu_barot]

You could use the REGEX constraint for the property field of the datalist.

Have a look at the below link, it has the example of REGEX implemented in the content model. The same can be implemented for the datalist as well. You just need to find a valid expression for your constraint.

https://docs.alfresco.com/6.1/references/dev-extension-points-content-model-define-and-deploy.html