X-Cart:Using Active Content - Revision history

Dohtur at 13:47, 8 October 2012

2012-10-08T13:47:29Z

Dohtur at 13:46, 8 October 2012

2012-10-08T13:46:37Z

Admin at 11:10, 26 January 2010

2010-01-26T11:10:40Z

Admin: Created page with '{{XC Pro}} A provider can use active content (that is unfiltered HTML and Javascript in product descriptions and extra field values and validation Javascript in Product Options).…'

2010-01-26T09:12:11Z

Created page with '{{XC Pro}} A provider can use active content (that is unfiltered HTML and Javascript in product descriptions and extra field values and validation Javascript in Product Options).…'

New page

{{XC Pro}}
A provider can use active content (that is unfiltered HTML and Javascript in product descriptions and extra field values and validation Javascript in Product Options).

When the <u>'Allow this provider to use active content on product pages'</u> option on the provider profile page in the admin section is enabled, this provider becomes trusted and can use active content without any validation.

When this option is disabled, the provider is 'untrusted'. When such a provider imports or updates data, the following data from this provider will be filtered to exclude the possibility of an XSS attack:

* product descriptions (including international descriptions);
* extra fields values.
* Product Configurator data
* manufacturers data
* special offer promo texts

When an untrusted provider imports data, all the HTML tags are excluded.

A validation Javascript field for Product Options is not displayed to untrusted providers.

In case the data have already been entered or modified by the admin, and the option 'Allow<u> this provider to use active content on product pages</u>' is disabled (the provider becomes untrusted), data/values of the fields defined above will be filtered before being displayed in the customer area.

Validations Javascript code for Product Options will be ignored.

{{Note1|Important! Enabling/disabling the 'Allow this provider to use active content on product pages' option does not change the data in the products of the providers. Only the provider profile is changed. }}

@@ Line 1: / Line 1: @@
 {{XC Pro}}{{XC Platinum}}
-Providers may be allowed to use active content. Active content is unfiltered HTML and Javascript in product descriptions and extra field values and validation Javascript in Product Options.
+In X-Cart PLATINUM and PRO editions, providers can be allowed to use active content. Active content is unfiltered HTML and Javascript in product descriptions and extra field values and validation Javascript in Product Options.
 When the <u>'Allow this provider to use active content on product pages'</u> option on the provider profile page in the admin section is enabled, this provider becomes trusted and can use active content without any validation.

← Older revision		Revision as of 11:10, 26 January 2010
Line 21:		Line 21:

	{{Note1\|Important! Enabling/disabling the 'Allow this provider to use active content on product pages' option does not change the data in the products of the providers. Only the provider profile is changed. }}		{{Note1\|Important! Enabling/disabling the 'Allow this provider to use active content on product pages' option does not change the data in the products of the providers. Only the provider profile is changed. }}
		+
		+	[[Category:X-Cart user manual]]