Hi everyone, We have just published Dashboard version 2.17.0
Fixes
- Better vertical align larger button icons if supplied via label text
- Fix ui_notification node to not accept raw HTML by default, add option to allow.
No real enhancements - but a critical fix to the ui_notification node that does change behaviour slightly. By default the node used to accept any html you passed to it - including any javascript code. If you hooked up a text_input node then any input could be passed right through and allow execution of dodgy code.
We have now added a checkbox to re-enable this (old) behaviour. The default is to force the input to text so any tags would be rendered as they are typed. For most users who just send text alerts there will be no difference.
Users will have to select the tick box to re-enable the old behaviour - but hopefully this will only be done with due diligence, having first inspected where the input messages come from.