hi I use Notification Pop-Up
it is possible to show html content in a popup dialog
or if any other node for send html to popup like messageBox in jquery
thx
thx
am sorry
I did not pay attention
In the OP's defence, it is slightly confusing.
It should probably read 'Accept raw HTML/JavaScript in msg.payload to format popup.'
Unless of course the user is allowed to type and send HTML code in the input field that pop's up. In which case I have said nothing.
good shout - will clarify as you suggest.
Note: the reason this is optional is of course that it is indeed a way to do code injection so you need to ensure you have sanitised any html/js you send to the notification - and don't allow any previous user input to leak through.
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.