Magnolia rich text fields

Question

I'm looking at outputting Rich Text in Magnolia directly to the front-end. I'm defining the field as below:

@TabFactory("Content")
public void contentTab(UiConfig cfg, TabBuilder tab) {
    tab.fields(
            cfg.fields.text("title").label("Title"),
            cfg.fields.richText("subtitle").label("Subtitle")
    );
}

Within a template, when information is saved into the JCR it appears to encode the data with HTML entities:

Title: ${content.title}
Subtitle: ${content.subtitle}

Outputs (raw source) ...

Title: The Title Field
Subtitle: &lt;p&gt;The Subtitle Field&lt;/p&gt;

But should output (raw source) ...

Title: The Title Field
Subtitle: <p>The Subtitle Field</p>

Is there a way to stop the Rich Text fields from being encoded automatically?

score 1 · Accepted Answer · answered Jul 21 '16 at 17:12

1

The decode function works: https://documentation.magnolia-cms.com/display/DOCS/cmsfn#cmsfn-DecodeHTML

[#if content.text?has_content]
    ${cmsfn.decode(content).text}
[/#if]

answered Jul 21 '16 at 17:12

bashaus

1,614
1
17
33

Well, obviously its gonna work but that's not stopping the encoding at the first place. – Ducaz035 Jul 21 '16 at 17:23
Yeah, I'd like to find a better approach – bashaus Jul 21 '16 at 17:25
This the standard Magnolia way of outputting html. – Vlad Andronache Jul 22 '16 at 08:26

score 0 · Answer 2 · edited May 23 '17 at 12:08

Most framework try to get rid of the XSS-kind of attacks so it is a good way to use the template as the following:

Title: ${content.title}
Subtitle: <p>${content.subtitle}</p>

It will prevent the users (or admins) to run magic JS or some other bad codes on the client.

Back to the question: check out the documentation here https://documentation.magnolia-cms.com/display/DOCS/Component+definition. There is something called escapeHtml take a look at it. :)

Edit: as bashaus pointed out he was using page properties not components. The solution in this way the following:

[#if content.text?has_content]
    ${cmsfn.decode(content).text}
[/#if]

TL.DR: Try to avoid html characters in dynamic content, but the feature is able to be turned off.

Thanks - but I'm not using components, I'm using page properties for this particular item. Any ideas on how to do it for the property (using the tabs item above) — bashaus, Jul 21 '16 at 17:04

Magnolia rich text fields

2 Answers2