Javascript in Calendar events shows up in local Calendar

[PoC2]

For people who subscribe to our Calendars, I've noticed that if there is javascript (say for a pop-up window) in the web site calendar entry, then that javascript appears in the calendar entry description when viewed on other devices – such as Mac Calendar.

Is this the same for anybody else?

[Marc]

I am not seeing any issues on my macbook here. Could you please give an example of this?

[PoC2]

Sure, here's what a calendar entry of mine looks like in mac calendar.

[Jim M]

To confirm, this is Javascript which you or your users are purposely adding to the description? This is the only way to reproduce this as this Javascript is not a part of our codeset.

[Marc]

By example, it's the actual entry on your site we would need. As mentioned by my colleague though, it actually looks like what has been entered as the description

[PoC2]

Yes, you're right. It's entered as part of the description. 🙂

It's fine on the web page as presented (you don't see it there) but the Javascript is pulled through into the description displayed by the Mac Calendar entry (as seen above).

Would it be possible to add a code filter to the calendar subscription feed to strip out any javascript found in a calendar entry?

[Marc]

1 minute ago, PoC2 said:

Yes, you're right. It's entered as part of the description. 🙂

It's fine on the web page as presented (you don't see it there) but the Javascript is pulled through into the description displayed by the Mac Calendar entry (as seen above).

Would it be possible to add a code filter to the calendar subscription feed to strip out any javascript found in a calendar entry?

Thats not something that is possible at the present time.

[PoC2]

Understood! Thank you for looking at it. It's just my weird way of doing things. 🙂