APEX

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

APEX 18.1 Interactive Grid - Escaping Special Characters on Text Field input columns

Daljit ROct 25 2019 — edited Nov 5 2019

Hi,

I have a scenario where an Interactive Grid region with a Text Field column allows input of the following:

<script>alert("hello!");</script>

As there is no 'Escape Special Characters' property on the 'Text Field' column and there is already a Dynamic action on the IG using the value entered column upon unfocused (to provide some functionality), the result is that the alert is being displayed; what is the best way handle such a scenario to prevent the 'script' from executing?

Thanks,

Daljit

APEX 18.1.0.00.45

DB 11.2.0.4.0

This post has been answered by John Snyders-Oracle on Oct 25 2019

Jump to Answer

Added on Oct 25 2019

#apex-discussions

4 comments

1,580 views