HTML in Label Controls 

Use

You can allow or forbid HTML code in label controls. If you allow HTML code, the system interprets HTML tags for formatting. Otherwise the system ignores all HTML tags.

If you allow HTML code JavaScript code is also executed. You may not want this to happen for security reasons.

 

Features

There are many places where you can define whether HTML code is to be executed:

...

       1.      Global setting

System administrators can forbid HTML code in forms globally in the configuration of Content Management. If this is the case, all other settings have no effect (see Form-Based Publishing).

 

       2.      Project-specific setting

You define how the system is to handle HTML code for a particular project in the XML Forms Builder (Options ® Forms ® HTML Code).

This setting only has effect if HTML code is generally allowed in forms.

 

Options for HTML Code

Option	Description
Allow All Tags	HTML code is interpreted in all label controls of the project. You may not want JavaScript to be executed for security reasons.
Determined by Control	You define whether HTML code is interpreted for each control separately. You may not want JavaScript to be executed for security reasons.
Strip All Tags	HTML code is interpreted in no label controls of the project.

 

       3.      Control-specific setting

You can allow or forbid HML code in the properties of individual label controls (Display HTML property).

This setting only has an effect if HTML code is permitted in the global settings and Determined by Control is selected for the project.

 

We recommend that you only allow HTML code in fields whose content is created using the HTML editor. The HTML editor does not allow users to enter executable JavaScript code.