Text formatting in short scrollable terms widget does not save html format

  • Profile Image
    stormingrobots
    Asked on June 17, 2017 at 05:36 PM

     

    none of the html format shows in preview. See below , the <b> and <ul><li>, etc. do reflect in the editor(build screen). However,  they do not show up in preview.    Once I got out the editing window, the format disappeared.  

    It is just I never saved .it. 

     

  • Profile Image
    jonathan
    Answered on June 17, 2017 at 06:29 PM

    Using html codes and tags within the text content of the widgets will not work.

    What you may want to use instead is a separate TEXT field for the longer formatted text details of the terms.

    Ex:

     

    I hope this help. Let us know if you need further assistance.

     

  • Profile Image
    stormingrobots
    Answered on July 13, 2017 at 06:45 AM

    uhm... that used to work before the form was migrated to the current new editing environment. 

  • Profile Image
    jonathan
    Answered on July 13, 2017 at 08:28 AM

    If you were referring to the ability to include html codes/tags within the content of the widget before, I believe it was just a glitch. That method can be exploited as XSS vulnerability and is not secure.

    Our dev have fixed that issue since.

    I hope this help in any way. Don't hesitate to let us know should you need further assistance.

     

  • Profile Image
    stormingrobots
    Answered on September 13, 2017 at 12:15 PM

    using separate fields within "Agree"  widget do not make sense though.  As users must agree to all the terms and policies.. Need advise. 

     

    Besides, the widget comes along with custom CSS, that means it is designed to allow html tags though, doesn't it?  I don't understand. 

  • Profile Image
    liyam
    Answered on September 13, 2017 at 01:50 PM

    Thank you for sharing your insights over this matter. 

    As we can recall, having to be able to format the texts in the widget was once allowed. However due to the high margin of possibility of us being compromised via XSS, although we had scripts in place to prevent this, we could just never be too complacent. So we had to put the necessary measures in place. 

    However, let me escalate this concern to the developers, if they can find a solution to make this a possibility to format texts on the short scrollable terms widget.

    Please take note though that I cannot guarantee that we can have an immediate resolution on this. But if in case we have updates, we'll inform you right away.

    Thanks.