Uploaded image for project: 'camunda BPM'
  1. camunda BPM
  2. CAM-13104

Embedded Forms render a preview in Cockpit

XMLWordPrintable

    • Icon: Feature Request Feature Request
    • Resolution: Fixed
    • Icon: L3 - Default L3 - Default
    • 7.15.0-alpha5, 7.15.0
    • None
    • None
    • None

      User Story (Required on creation):

      When looking at embedded forms in Cockpit Deployments, I want to see a rendered preview.

      Functional Requirements (Required before implementation):

      • embedded forms are rendered as read-only in cockpit when I select the .html resource in deployment view
      • The raw-source is still available and can be viewed
      • I can disable the feature in the config.js. This is documented in the Cockpit docs.

      Technical Requirements (Required before implementation):

      • form-scripts are not executed and no info is pre-filled

      Hints (Optional):

      • This could potentially introduces an attack vector (arbitrary code execution) for script tags contained in the html, as well as XSS.
      • We already assume that deployed html is safe to render in Tasklist, so we reasonably extend that assumption to cockpit

        This is the controller panel for Smart Panels app

              hariharan.parasuraman Hariharan Parasuraman
              martin.stamm Martin Stamm
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: