PoC2 Posted January 8, 2022 Share Posted January 8, 2022 For people who subscribe to our Calendars, I've noticed that if there is javascript (say for a pop-up window) in the web site calendar entry, then that javascript appears in the calendar entry description when viewed on other devices – such as Mac Calendar. Is this the same for anybody else? Link to comment Share on other sites More sharing options...
Marc Posted January 10, 2022 Share Posted January 10, 2022 I am not seeing any issues on my macbook here. Could you please give an example of this? Link to comment Share on other sites More sharing options...
PoC2 Posted January 10, 2022 Author Share Posted January 10, 2022 Sure, here's what a calendar entry of mine looks like in mac calendar. Link to comment Share on other sites More sharing options...
Jim M Posted January 10, 2022 Share Posted January 10, 2022 To confirm, this is Javascript which you or your users are purposely adding to the description? This is the only way to reproduce this as this Javascript is not a part of our codeset. Link to comment Share on other sites More sharing options...
Marc Posted January 11, 2022 Share Posted January 11, 2022 By example, it's the actual entry on your site we would need. As mentioned by my colleague though, it actually looks like what has been entered as the description Link to comment Share on other sites More sharing options...
PoC2 Posted January 11, 2022 Author Share Posted January 11, 2022 Yes, you're right. It's entered as part of the description. 🙂 It's fine on the web page as presented (you don't see it there) but the Javascript is pulled through into the description displayed by the Mac Calendar entry (as seen above). Would it be possible to add a code filter to the calendar subscription feed to strip out any javascript found in a calendar entry? Link to comment Share on other sites More sharing options...
Solution Marc Posted January 11, 2022 Solution Share Posted January 11, 2022 1 minute ago, PoC2 said: Yes, you're right. It's entered as part of the description. 🙂 It's fine on the web page as presented (you don't see it there) but the Javascript is pulled through into the description displayed by the Mac Calendar entry (as seen above). Would it be possible to add a code filter to the calendar subscription feed to strip out any javascript found in a calendar entry? Thats not something that is possible at the present time. Link to comment Share on other sites More sharing options...
PoC2 Posted January 11, 2022 Author Share Posted January 11, 2022 Understood! Thank you for looking at it. It's just my weird way of doing things. 🙂 Marc 1 Link to comment Share on other sites More sharing options...
Recommended Posts