-
Type:
Bug
-
Resolution: Unresolved
-
Priority:
Normal
-
None
-
Affects Version/s: 10.0.0
-
Component/s: None
-
Security Level: Jimmy
-
None
-
None
Steps to Reproduce
- run the attached zul
Current Result
Cascader renders HTML snippet as text
Expected Result
Cascader renders HTML snippet from ItemRenderer as elements
Debug Information
- Should verify those components that accept ItemRender e.g. Chosenbox, Selectbox, Cascader, Searchbox,
- js widget, Cascader, _renderItems0, out.push(zUtl.encodeXML(item.content));
- relates to
-
ZK-5182 Prevent XSS issue in component attributes
-
- Closed
-