Page 1 of 1

Values passed from Model to iFrame aren't encrypted

Posted: March 25th, 2022, 4:37 pm
by stowejs
Passing a value to a Widget like the Calendar helper sometimes does not encrypt the query string with the other values. Example here: https://platform1.krisesystems.com/IDE/ ... W-20000000

When you go to the calendar helper the value in the textbox is passed at the end of the ep_param in clear text "&AllowPast=test": view-source:https://platform1.krisesystems.com/DV/A ... wPast=test

Re: Values passed from Model to iFrame aren't encrypted

Posted: March 30th, 2022, 9:26 pm
by SteveCap
image.png
All the rows with Type Field selected and nothing for HtmlId will be treated as a empty Constant.

Type JavaScript and Field which generates JavaScript for you will not get encoded because they are pulled from the page and it never goes back to the server to form the url. To encrypt it you would need to pass it to a controller first.