Werk #215: Added option to make HTML escape in plugin outputs configurable
Component | User interface |
Title | Added option to make HTML escape in plugin outputs configurable |
Date | Nov 20, 2013 |
Checkmk Edition | Checkmk Raw (CRE) |
Checkmk Version | 1.2.3i7 |
Level | Trivial Change |
Class | Security Fix |
Compatibility | Compatible - no manual interaction needed |
It is now possible to disable the HTML escaping in plugin outputs and log messages. This is useful if one really wants to use HTML codes provided by check plugins or log messages. Disabling the escaping makes it possible to inject HTML / script code into multisite, so be careful.