JSF: output is email content

Asked Jan 10 '20 at 10:06

Active Jan 10 '20 at 10:56

Viewed 83 times

I have a issue to display my email body correctly.

I have the following h:outputText:

<h:outputText value="#{mybean.selectedEmail.body}" escape="false" />

It´s working fine and the content is showing, but the issue is in my page I´m using also the CSS style classes from the current template page. How can I do this, that I will use for the h:outputText only the HTML / Css from the email (body) ?

Any suggestion / code examples?

edited Jan 10 '20 at 10:43

Selaron

6,105
4
31
39

asked Jan 10 '20 at 10:06

vished2000

2

Try using an `iframe` – Jasper de Vries Jan 10 '20 at 10:11
Great, it´s working with iframe srcdoc="..." – vished2000 Jan 10 '20 at 10:28
also using an outputText to display user controlled data opens a security leak for [XSS](https://stackoverflow.com/questions/7722159/csrf-xss-and-sql-injection-attack-prevention-in-jsf). – fuggerjaki61 Jan 12 '20 at 10:52

JSF: output is email content

0 Answers0