Skip to Content (Press Enter)
2025-04-07 16-22-34
Silvia Apeldoorn
38Views
1Comments
Solved
[Web Previewer] Fix for HTML Injection warning
Question
Forge
Traditional Web
web-previewer
Web icon
Web Previewer (O11)
Forge asset by Rui Mendes
Application Type
Traditional Web

Hi, 

I was playing around with this Webviewer and noticed HTML injection warning in the expression to show pdf. 

I managed to fix this by replacing the unescaped expression by an Iframe widget. Are there any disadvantages for using this widget ? 

Thanks,

Silvia

0
0
30 Mar 2021
Copy Link
2024-01-18 12-42-28
Bogdan Boglea
Solution

Hello Silvia,


The only "downside" of this component is if your project/company has some security restrictions on 3rd parties like Microsoft/Google, since it uses an iframe to allow the preview of xlxs,docx etc. documents.

In one of our projects it was a no-go since we have a content security policy in place that doesn't allow external redirects/iframes in the applications.


Regards,

Bogdan

0
0
07 Apr 2021
Copy Link
Community GuidelinesBe kind and respectful, give credit to the original source of content, and search for duplicates before posting.