Embedded Forms render a preview in Cockpit

XMLWordPrintable

    • Type: Feature Request
    • Resolution: Fixed
    • Priority: L3 - Default
    • 7.15.0-alpha5, 7.15.0
    • Affects Version/s: None
    • Component/s: None
    • None

      User Story (Required on creation):

      When looking at embedded forms in Cockpit Deployments, I want to see a rendered preview.

      Functional Requirements (Required before implementation):

      • embedded forms are rendered as read-only in cockpit when I select the .html resource in deployment view
      • The raw-source is still available and can be viewed
      • I can disable the feature in the config.js. This is documented in the Cockpit docs.

      Technical Requirements (Required before implementation):

      • form-scripts are not executed and no info is pre-filled

      Hints (Optional):

      • This could potentially introduces an attack vector (arbitrary code execution) for script tags contained in the html, as well as XSS.
      • We already assume that deployed html is safe to render in Tasklist, so we reasonably extend that assumption to cockpit

            Assignee:
            Hariharan Parasuraman
            Reporter:
            Martin Stamm
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: