SBM 11.0 contains a new security feature that "sanitizes" HTML stored in the database for Memo fields , Journal fields , and notes, which prevents cross-site scripting (XSS) attacks, JavaScript injections, and rendering of poorly-formatted HTML from occurring. When this setting is enabled, SBM automatically compares the raw HTML in the database to the list of approved HTML tags and attributes that you configure to ensure the HTML is considered "safe" before it is rendered on the form.
|