-
Type:
Feature Request
-
Resolution: Fixed
-
Priority:
L3 - Default
-
Affects Version/s: None
-
Component/s: None
-
None
User Story (Required on creation):
When looking at embedded forms in Cockpit Deployments, I want to see a rendered preview.
Functional Requirements (Required before implementation):
- embedded forms are rendered as read-only in cockpit when I select the .html resource in deployment view
- The raw-source is still available and can be viewed
- I can disable the feature in the config.js. This is documented in the Cockpit docs.
Technical Requirements (Required before implementation):
- form-scripts are not executed and no info is pre-filled
Hints (Optional):
- This could potentially introduces an attack vector (arbitrary code execution) for script tags contained in the html, as well as XSS.
- We already assume that deployed html is safe to render in Tasklist, so we reasonably extend that assumption to cockpit
This is the controller panel for Smart Panels app
- is related to
-
CAM-13093 Cockpit can render camunda-forms in the deployments view
-
- Closed
-