65
Views
8
Comments
Solved
[OutSystems Data Grid] In DataGrid, html text is getting displayed instead of icon.
outsystems-data-grid
Reactive icon
Forge asset by OutSystems

Recently we have upgraded Outsystems platform to new version 11.31.0 from 11.27.0.

Post upgrade we found in Datagrid  html text is getting displayed instead of icon.

Any solution for this?


2022-11-12 11-28-30
Gonçalo Martins
Staff
Solution

Hi @Mithun Rathod 

Next time please indicate the OutSystems Data Grid versions - the one you had and the one you upgraded.

From what I can see you should have a version >= 2.17.0 and, as you can see in the release notes, to improve security and protect against XSS vulnerabilities, a new parameter, SanitizeInputValues has been added to the Grid block's optional configurations. 
The default value for SanitizeInputValues is set to True, ensuring that HTML content is automatically sanitized out of the box, prioritizing security. 

So, if you set SanitizeInputValues = False it will work as expected:

Cheers,
GM 

2022-12-30 07-28-09
Navneet Garg

can you please provide more details like screenshot and oml file.

2020-11-30 04-40-12
Mithun Rathod

Hi Navneet,

We have used Action column and passed html tag in TestFixed property.
Please find below details. Before upgrade. 

Output: 

After Upgrade: Instead of Icon, html tag is displayed. 

2022-12-30 07-28-09
Navneet Garg

it is working fine for me I am not sure can you share the screen link ? where I can check the html or create a test screen which I can access to see the html.

Version 11.31.0


2022-11-12 11-28-30
Gonçalo Martins
Staff
Solution

Hi @Mithun Rathod 

Next time please indicate the OutSystems Data Grid versions - the one you had and the one you upgraded.

From what I can see you should have a version >= 2.17.0 and, as you can see in the release notes, to improve security and protect against XSS vulnerabilities, a new parameter, SanitizeInputValues has been added to the Grid block's optional configurations. 
The default value for SanitizeInputValues is set to True, ensuring that HTML content is automatically sanitized out of the box, prioritizing security. 

So, if you set SanitizeInputValues = False it will work as expected:

Cheers,
GM 

2025-02-11 13-01-16
Shounak Devbhuti


Hi Gonçalo,

Just curious, is there any best practice to put icons here in this case? As I can understand that this new feature has been developed keeping security in mind, so is there any other way to achieve this without turning off the sanitizeInputValues?

Kind regards,

Shounak

2022-11-12 11-28-30
Gonçalo Martins
Staff

Hi @Shounak Devbhuti 

Without compromising security no, so I can't suggest anything in that sense.

Cheers,
GM

2022-12-30 07-28-09
Navneet Garg

you got solution for this ?

UserImage.jpg
Jyotsna Deokar

Yes. Above solution worked for us.

Community GuidelinesBe kind and respectful, give credit to the original source of content, and search for duplicates before posting.