WebUI upcoming update to Custom Content

[dexdexdex]

For this week’s accelerated WebUI release, we’ll be pushing updates to the WebUI Custom app to be better around how it handles custom Fixlets that have script elements inside their descriptions.

Previously, the WebUI would strip out these elements automatically when people edited custom content within the WebUI (arbitrary code execution is bad) but people would miss the warnings in the UI we had about this.

The WebUI will now display a bigger warning and prevent people from editing custom content with scripting elements within the WebUI (we’re working on a safe way to do this). For folks that want to do editing of custom content that have scripting elements, we recommend they stick to using the BES Console for now.

As always, if you guys have particular questions or feedback feel free to poke this thread…

Thanks guys!

<3 <3 WebUI Team

[dexdexdex]

Hello friends -

This release is out the door, fresh off the presses. Here’s a screenshot of that warning in case you didn’t know what that looked like:

We already have stuff lined up for next week and the week after that, so I’ll see you next time.

Any problems or comments or things you want to see in the WebUI just poke us!

WebUI Team