Joget DX 8 Stable Released
The stable release for Joget DX 8 is now available, with a focus on UX and Governance.
Table of Contents |
---|
This article will discuss on the implementation of Input Sanitization in Joget. The purpose of sanitizing text field values is to protect against malicious input that could lead to security vulnerabilities or unintended behavior. In Joget, sanitization option is available for the following form element within the form:
1.Text Area
...
Info |
---|
`Sanitize Input Value?` option will sanitize the input value before storing data to database. It will also un-escape it again when loading from form binder to prevent double escape. |
Drag the Text Area, Text Field and Custom HTML to form
...
Figure 1: Drag mentioned form elements
Insert the following line into the Custom HTML configuration. It will serve as a sample display of sanitized value.
Code Block |
---|
<br> <p>Custom HTML</p><input type="text" name="sample" value=""/> |
Figure 2: Add HTML code
In each of the form element advanced options, tick on the "Sanitize Input Value?" to enable sanitization
...
Figure 3: Enable Input Value Sanitization
Create CRUD and test. Input value of your choice into 3 of the form fields.
Figure 4: Input text
Results:
In list, it will show as text as shown in Figure 5
...
Figure 7: Database Result
View file | ||||
---|---|---|---|---|
|
...