Can I suppress HTML escaping in a read-only item?

I have an item that is displayed as read-only. The item contains HTML markup. HTML DB seems to automatically escape special characters in the item value.
Is there a way to suppress this?
For example, I have a text input item with the value:
<b>Hello</b>
(that is, it contains the bold elements which I want to output as is).
HTML DB seems to be escaping the item value so I see the bold elements in the browser and what I see in the page source is: <b>Hello</b>
There doesn't seem to be "escape special characters" / "don't escape special characters" options for read-only mode like there is for "Display As Text" items. Can anyone suggest a workaround?
Thanks,
Eric

Eric - Text input items are escaped on output whether they are read-only or not. But to answer your question generally, APEX does not emit input items of any type to the browser without escaping them unless there is a guarantee that they have been escaped on input, e.g., when passed in through the URL, or that they acquired their value from within the application. These guarantees apply only to non-POSTable item types such as Display As Text (does not save state) items and a couple others. So in short, we observe the rule (which should be observed by app developers) that it is never safe (from an XSS-protection standpoint) to emit a POSTable item without escaping it first.
In your case, can you define a safe item type (Display as Text, does not save state) and set its source to the markup-containing item that you are now displaying as read-only? If so, you can conditionally display only the safe one and hide the other.
Scott

Similar Messages

  • When I try to print sth I can´t choose my printer. Adobe Reader only shows a printer I used years ago.I aleady deleted and reinstalled the Reader and deleted all other printers from the computer.How can I add a new printer to Adobe Reader?Thanks for help!

    When I try to print sth I can´t choose my printer. Adobe Reader only shows a printer I used years ago.I aleady deleted and reinstalled the Reader and deleted all other printers from the computer.How can I add a new printer to Adobe Reader?Thanks for help!

    Hi,
    I would suggest you to uninstall Adobe Reader using the cleaner tool and then re-install the latest version.
    Adobe Cleaner Tool:- Download Adobe Reader and Acrobat Cleaner Tool - Adobe Labs.
    Latest version of Adobe Reader:- http://get.adobe.com/reader/
    If you still experience the same issue, please share the following information:-
    - Screenshot of Adobe Reader showing printer options
    - Screenshot of Microsoft Word showing printer options
    - Screenshot of control panel- Control Panel\All Control Panel Items\Devices and Printers
    Regards,
    Nakul 

  • Can an unique index be created on read only cache group

    Hi
    Can an unique index be created on read only cache group
    Regards
    Siva Kumar

    No, I do not think so. Creating a unique index could cause autorefresh operations to fail if the data being refreshed contains duplicate values that would not be allowed by the index. You can create regular indexes on a table in a readonly cache group.
    Chris

  • Can you force a value into a read-only numeric data member?

    I have code that will force a value into a numeric data member. Unfortunately the numeric data member in question is read-only. Can you force a value into a read-only numeric data member?

    Andre,
    I think you should get together with the other engineers there at NI. I spoke to one on the phone yesterday and he told me that the read-only aspect relates to writing between the database and PLC. I'm trying to write to the database and he told me that I could do it.

  • Read only item populated by dynamic LOV

    Since I'm using artificial keys in most of my table FKs, I need to use a lot of LOVs to provide the user with discernible data.
    Many of the columns I use an LOV for I need to be read only items. However, whenever I use a dynamic LOV, I do not see how to make it read only. It sets the value of the item to [].
    I know this can be accomplished in some cases with a join in the underlying query. However, many of the pages where I need to make this change are not based on a query.
    Is there a way to make an item populated by an LOV read only while still retaining the value?
    Thanks for your help!
    -Reid

    I'm using apex 3.2.1. Your testing and replies have helped me realize that the problem is that the column indeed did not have a value. When I had the item "display as" set to "select list" the LOV was also setup for allow NULL=NO. Thus, it was showing some value in the LOV in that item. But, when I switched to the "display as text" and set the always read only, then it gave the double brackets []. When I changed the allow NULL=YES, it worked fine and gave me a blank value.
    Thanks again!
    -Reid

  • How can I change the permissions on a read only external HD

    I have a WD external HD and I am transferring a file more than 4GB in size. The current partition scheme supported by Ma, being FAT 32, supports only up to 4GB in file transfer size. If I format the external HD on my PC in a NTFS file format it is supposed to handle file transfers bigger than 4GB. Which is true, but it only goes one way, so for example if I am transferring a file from PC to HD to Mac it works just fine, with a few minor hickups, but the other way it does not work at all. So if I want to add anything onto the external HD being hooked up to my Mac, and still being in NTFS format I get a message saying that I do not have sufficient privileges, and under drive info it says that it is read only. Any help on the topic, please.......All the best
    Rafcio

    Hi Rafcio
    I get a message saying that I do not have sufficient privileges, and under drive info it says that it is read only. Any help on the topic, please
    Basically, this is not a privileges problem, it is a limitation of the formats. OS X can read NTFS, but not write it. See How to transfer data from a PC to a Macintosh:
    Mac OS X 10.3 and 10.4 work with local NTFS-formatted volumes. The volume will be read-only.
    … and Boot Camp 2.0, Mac OS X 10.5: Frequently asked questions:
    Mac OS X can read and write FAT volumes, but only read NTFS volumes.

  • Can't format ipod classic it's read only

    Can't format my ipod classic because hard drive is read only.

    Howdy miller4303,
    If you need to restore your iPod classic, use the steps in this article -
    iPod only shows an Apple logo and doesn't start up - Apple Support
    Thanks for using Apple Support Communities.
    Best,
    Brett L 

  • Can I make a LOB segment tablespace 'READ ONLY' so no backup?

    Greetings
    Environment: Oracle 11.2.0.3 on Solaris 10.5
    LOB newbie here.
    I am currently supporting a database, but not the application, that is loading fairly large XML files into CLOB columns. Today I have 121 LOBSEGMENTs taking up about 1GB of space and in the same tablespace as the owner table.
    I understand that the CLOB data will not be changing that often.
    My issue is now my RMAN backup is much larger and is filling the mount point where the backup files are stored.
    I'd like to move the LOBSEGMENT objects to a different tablespace, back it up once and mark the tablespace as READ ONLY so it doesn't get backed up every time.
    I am currently doing a full database backup every day and archivelog backups every 4 hours.
    Can I use something like: ALTER TABLE 'X' MOVE LOB 'Y' STORE AS TABLESPACE 'Z' ?
    Is it then possible to alter the 'Z' tablespace to READ ONLY and not affect the user's ability to update the other parts of the table?
    Other alternatives are most welcome!!
    Thanks very much!!
    -gary

    Thanks for the quick response.
    I don't want you to give up, I'd just like some advice from your experience.
    Even though I am working in a test environment I was hesitant to execute the above commands so as not to cause the application to fail as the user is loading the XML data.
    I want the tablespace storing the LOBSEGMENTs to be READ ONLY but I wasn't sure if I could specify just the LOBSEGMENT part of a row to be READ ONLY without causing update problems for the other columns in the table.
    I realize the new LOBSEGMENT tablespace will be READ ONLY and the original tablespace with the rest of the data will remain READ WRITE.
    Also, I'm assuming if the CLOB data ever needs to change I should be able to alter the tablespace back to READ WRITE, have the user make the changes, be sure the new data is backed up and alter the tablespace back to READ ONLY.
    Is this how you would handle the situation?
    Thanks very much!
    -gary

  • Can't insert widget as document head read only

    When I try to insert my LIghtbox Gallery widget into my web page in CS5.5 I get the message
    "This widget requires code that must be inserted into the head of the doucment. Insertion cannot happen as the head of this document is read only"
    How do i turn read only off? Or is there any other way to insert it?
    Many Thanks

    Hello Jenny,
    if I understand you correctly, you should only call the widget you need and click "code wiew"
    From there you have to copy the entire source code into an empty DW file. So you can see how that works.
    You can add only the needed code into your file or you can do it all in reverse, by adding your website contents into the widget source code.
    Hans-Günter

  • Can we delete file which are in read only mode?

    Hi,
    I created application and in this i accessing some files and changing its access mod to read only through JAVA and after that i want to delete those file through FLEX.
    Is there any way to change file mod in FLEX and delete read only file through FLEX. Please show me the way.
    Thank You

    This should help you:
    - http://docs.huihoo.com/flex/4/flash/filesystem/FileMode.html
    - http://www.flex-blog.com/save-data-to-file-system-with-air-in-flex-4/

  • How can I stop Firefox from making files read only?

    Firefox (and not IE or Google Chrome) makes certain files (Movie Magic Screenwriter files, for example) read only. Is there a way to prevent that?

    Let's attempt to fond out what you have installed that added that "noise" to Firefox.
    '''Try Firefox Safe Mode''' to see if the problem goes away. [[Troubleshoot Firefox issues using Safe Mode|Firefox Safe Mode]] is a troubleshooting mode that temporarily turns off hardware acceleration, resets some settings, and disables add-ons (extensions and themes).
    If Firefox is open, you can restart in Firefox Safe Mode from the Help menu:
    *In Firefox 29.0 and above, click the menu button [[Image:New Fx Menu]], click Help [[Image:Help-29]] and select ''Restart with Add-ons Disabled''.
    If Firefox is not running, you can start Firefox in Safe Mode as follows:
    * On Windows: Hold the '''Shift''' key when you open the Firefox desktop or Start menu shortcut.
    When the Firefox Safe Mode window appears, select "Start in Safe Mode".
    :[[Image:Safe Mode Fx 15 - Win]]
    '''''If the issue is not present in Firefox Safe Mode''''', your problem is probably caused by an extension, theme, or hardware acceleration. Please follow the steps in the [[Troubleshoot extensions, themes and hardware acceleration issues to solve common Firefox problems]] article to find the cause.
    ''To exit Firefox Safe Mode, just close Firefox and wait a few seconds before opening Firefox for normal use again.''
    When you figure out what's causing your issues, please let us know. It might help others with the same problem.

  • When trying to save a file under Excel 2008, ver 12.3.3, with extension .xlsx or .xlx, I am told it can't be saved because it is "read only." How do I change the file from read only?

    When I try to save a file using Excel 2008, ver 12.3.3, with extension either .xlsx or .xls, I get a message saying it cannot be saved because it is "read only." How do I change it from read only? (And how did it ever get to be read only?)

    Save the file as a new name. Close and Open the new file.
    Most likely when a file transfer happens, Office makes the file 'Read Only'.
    If you have two opened files with the same name, the last opened file will be 'Read Only'.

  • AJAX and Read-Only Items

    I used the examples from Carl Backstrom and Denes Kubicek to get my cascading select list working.
    I have two select list fields (Origin and Type) that I use to determine the data to appear in a third select list field (Customer).
    With help from people on this forum I was able to get things to work.
    Now I have an issue when I conditionally make the Origin field "read-only".
    When this occurs, data appears in my "Customer" select list on the INITIAL display of the form.
    However, when I change the value in the "Type" select list field, no data appears in the Customer select list.
    If I change the "Origin" field to NOT be read-only, I can change the value in the "Type" select list field and everything works OK.
    I hope I have given enough information.
    THANKS in advance.
    Raymond

    Raymond,
    It looks like read-only select is really special:
    (I replaced < > with [])
    When select is not read-only generated html is:
    [select name="p_t01" size="1" id="P1_ORIGIN_NO"
    onchange="get_AJAX_SELECT_XML('P1_ORIGIN_NO','P1_DISPLAY_SSA','','','P1_CUSTOMER','CASCADING_CUSTOMER_LOV')";
    [option value="%null%"]%[option]
    [option selected="selected" value="001"]DOTIKI MINE[option]
    [option value="S01"]ECO COAL PELLETIZATION NO. 12, LLC[option]
    [select]
    It means that P1_ORIGIN_NO in  get_AJAX_SELECT_XML will be "001"
    But when select is read-only your html code is:
    [input type="hidden" name="p_t01" value="001" /]
    [span id="P2_ORIGIN_NO"
    onchange=
    "get_AJAX_SELECT_XML('P2_ORIGIN_NO','P2_DISPLAY_SSA','','','P2_CUSTOMER','CASCADING_CUSTOMER_LOV')";
    DOTIKI MINE
    [span]
    [pre]
    P2_ORIGIN_NO in  get_AJAX_SELECT_XML will be "DOTIKI MINE" which I think is wrong.
    It looks like for read-only you need hidden item with code of
    drop - down list or somehow you have to reach [input type="hidden" name="p_t01" value="001" /]
    Lev
    Message was edited by:
            le                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   

  • Defaulting Values and Read-Only Items?

    Hi All,
    Brand new to APEX and trying to think of ways to get a few things working for me hoping you might have some suggestions.
    1. Want to have a few items default upon the creation of a record.
    - Created Date - have a column/page item that I would like to default/auto populate with the current date
    - Create by - would like to have column/page item default with the login id of the user
    2. Dynamically make page/items read-only.
    - Once a record is created I would like to ensure that the only person able to edit the record would be the creator. I assume I can use the Read Only feature at the item level but am unsure of the syntax to use to make the item read-only for only the user who created/or is creating the record. Since I would like to be defaulting the "Create by" (see question 1) column to the login id of the user this should be plausible just not sure of the syntax to reference the current user id.
    3. Passing a value to to bind variable.
    - I have build a basic page with an Interactive Report and have made one of the columns in the Interactive report 'linkable' which launches a BI Publisher report by calling a Report Query. Currently in my report query I have hard coded a value in the SQL statements where clause to prove the theory works what I am struggling with is a declarative way to pass the value that I am clicking to a bind variable in my SQL statements where clause in the query.
    Thanks in advance for any suggestions and appreciate your patience with an APEX newbie .. about 2 days old at this juncture. The more specific you can be on what to do and where to go is greatly appreciated.
    For those interested in have greater control with your report layout BI Publisher looks to be a great options. I was able to getting by reviewing [how to document:|http://www.oracle.com/technology/products/database/application_express/howtos/howto_master_detail_pdf.html] on OTN. My challenge some in the fact that rather then simply being on the exact row that I want reported on I would like to simply click on a link in a list and pass that value as the bind variable.
    JES

    Hi -
    "1. Want to have a few items default upon the creation of a record."
    This is typically done in a trigger at the db level.
    CREATE OR REPLACE TRIGGER mytrigger
    BEFORE INSERT OR UPDATE
    ON mytable
    REFERENCING NEW AS new OLD AS old
    FOR EACH ROW
    BEGIN
      if (:new.CREATED_DATE is null)
        then
          :new.CREATED_DATE := sysdate;
        end if;
      if (:new.CREATED_USER is null)
        then
          :new.CREATED_USER := nvl(v('APP_USER'),user);
        end if;
      :new.UPDATED_DATE := sysdate;
      :new.UPDATED_USER := nvl(v('APP_USER'),user);
    END CREATE OR REPLACE TRIGGER mytrigger;"2. Dynamically make page/items read-only."
    See 'APP_USER' in the Apex docs...
    "3. Passing a value to to bind variable."
    This is done in the report configuration in the Apex UI...
    Session State Include application and session information.
    You might want to consider reviewing some of the Apex docs and tutorials, I recommend this:
    [http://download.oracle.com/docs/cd/E14373_01/appdev.32/e13367/toc.htm]
    Good luck.

  • Are 'read only' items causing my automatic row processing to fail?

    I have a form that uses automatic row processing to update my table.
    I recently had to add a check to lock down the fields using the read only condition where a record has been 'approved'. So, I turned off all of the fields and hid the update button.
    Now they want me to check to see if the user is a manager, and if so, allow them to see the update button, and make a single field on the form modifiable.
    I have the user identified as a manager, and can make the field accept the change (a yes/no combo box). Yet when they click the update button, the form just sits there. A branch is supposed to fire on hitting that button, taking them back to the previous report, but it doesn't happen. The source of the combo box in question uses a column on the table, and works fine when the form has all of the fields showing for modification.
    I had some validations that I finally set to never fire, thinking that they were failing and just not giving the error messages. I know a bad sql or pl/sql atatement in a validation will cause the form to just keep sitting there doing nothing, and thought it might help.
    Several of the various fields are combo boxes, several are text boxes.
    I'm stumped.
    Shall I keep the regular update button hidden whether it is a manager or not (because it has been 'approved'), and enable a new button that fires off a process to update the one field that the manager may want to change? Does making a field 'read only' always have a detrimental effect on the auto processes I've been counting on? Is that if fact what is happening now?
    Thanks in advance for any advice or comments on this.
    Clayton

    Hi, Scott.
    My version is 3.0.0.00.20
    I have received info to set up the application, though I have not activated it as yet. I'm reluctant to try to load up the various tables to make it work. It could be done.
    My workaround is to that the user (a manager) fires off to another form to show an individual record, and ask if he/she really wants to make this change. On submit, they will be taken back to the original locked down form, and I will update the single field in that process of returning them. This will actually be a plus, in that I expect to show them all of the 'duplicate' entries for that item, and show them that by 'activating' this particular item, they will 'deactivate' the one duplicate that is currently active. Or, if they are deactivating the sole item that is active, that there will in fact be no active items in the system. Convoluted as heck, but they swear this is how they've been doing business with their briefcases and file cabinets of Excel files. I'm surprise they even float at this point (these are ships we're talking about).
    This all may be due to the form originally having a next/previous/count process once arrived at my clicking on the edit button of the report of items. All of that has been hidden away, and though the fields exist of the form, they are not used. They only see the current item that they clicked on from the report.
    I read up a little on session state, as well as posts with the debug error I was getting. I'm still not on board with the whole issue of 'state'. Items stay as they are until they're changed, no? I suppose that sounds simplistic.
    One of the things that caught my eye was several combo box lists that on read only mode, showed [] square brackets. Which, in some cases is okay.
    What I'll try to do is set up a public application - for future use if nothing else. I'm going to be working on this for awhile. I have more than a bit of work to do to cleanse the data as well as get rid of the single sign on requirement (I'll assume that I should have to do this) in order to share the app.
    I know you're expecting me to have this up and running for you to look at, but I'm under the gun. And they actually like my workaround.
    I'll keep everybody informed, one way or another.
    Clayton

Maybe you are looking for

  • Ora-06503/rep-1401 with my second report

    hello :D im making my second report (new to reports, self studying) i encountered REP-1401-'cf_itemtypeformula': Fatal PL/SQL error occured. then i tried to trace the error by putting srw.message() in parts of the code to try to figure out the proble

  • Multiple process start with terminal?

    How do I open multiple programs at one? I need it to open an executable, leave it running, open another executable. I'm not sure how to do this branch thing in the terminal I want to use this for an .sh script Last edited by caelestis (2009-04-29 22:

  • WARNING: Flash Archive IDs do not match (possible corrupt archive)

    I'm running into problems when trying to use a newly patched Solaris 10 system's flash image via my Solaris 9 Jumpstart server. I'm able to use other flash's (Solaris 9 and 10) fine, but when I use this flash I get: Extracted 823.00 MB ( 99% of 824.9

  • The Status function won't stay on for my Universal Wireless Keyboard 3169WWZ

    I have worked on this for many hours with no success.  I think the problem is the Keyboard Status.  I have downloaded the update for this keyboard and it seems to be functioning except...They keyboard status will not stay in the On position.  I have

  • Combining two StringBuffer array elements into a single array element

    I just need to know how to combine two stringBuffer array elements into one StringBuffer ciphertext [] = new StringBuffer[2];           StringBuffer s0 = new StringBuffer("11011111111110001001101110110101");           StringBuffer s1 = new StringBuff