Hybrid CMS Cockpit - Add Javascript

Question

I work with Cubpit Hybrid CMS (only as a user, not an administrator), and I created a page with content slots.

However, I am trying to insert some JavaScript into the page. I can’t see where I don’t want to add JavaScript, and I tried the tags <script>, but they were simply deleted and turned into plain text.

Does anyone know if this is possible, or should I ask the system administrator to enable something?

Answer 1

You can add javascript, but you must have the developer do some overrides for the configuration files (local.properties) in the environment in which you want to add javascript.

:

xss.filter.rule.script_fragments=
xss.filter.rule.lonely_script_tags=
xss.filter.rule.lonely_script_tags2=
xss.filter.rule.javascript=

, :)

Answer 2

Typhoid Marty , , :

Cross Crossing Scripting (XSS) script.

, , , , , CMSCockpit, HMC HAC:

hac.xss.filter.enabled=false
hmc.xss.filter.enabled=false
cmscockpit.xss.filter.enabled=false

XSS: https://wiki.hybris.com/display/release5/Web+Security+XSS+Filter

Answer 3

:

<script type="text/javascript">
function myFunction()
{
document.body.style.backgroundColor="lavender";
<!-- document.write(Date()); -->
alert(document.getElementById("hai"));
}
</script>

, Hybris ZK, - ".zul".