Discussions
Stay up-to-date with the latest news from NetSuite. You’ll be in the know about how to connect with peers and take your business to new heights at our virtual, in-person, on demand events, and much more.
Now is the time to ask your NetSuite-savvy friends and colleagues to join the NetSuite Support Community! Refer now! Click here to watch and learn more!
Stay in the Know
Be sure you're subscribed to NetSuite communication to stay in the know about monthly happenings, updates and announcements. Subscribe
Be sure you're subscribed to NetSuite communication to stay in the know about monthly happenings, updates and announcements. Subscribe
Troubles and XSS concerns regarding serverWidget.Sublist in SuiteScript 2.0
I'm currently populating a Sublist in a SS 2.0 Suitelet, and there are problems.
var results = [/* ...some data... */]; results.forEach(function (el, i) { sublist.setSublistValue({ id: 'field1', line: i, value: el.note //user content }); }); I can only view the first 25 results. Further pages will not load. I don't even see any signs of activity suggesting NS is even attempting to page in more results. That alone makes this unusable. If it's broken for such a simple scenario, it's probably a defect.
More concerning is what I discovered while playing around with the SublistType.
For serverWidget.SublistType.EDITOR and INLINEEDITOR, text content is rendered safely to text nodes (and the Sublist is not paged; too bad I don't want an editable Sublist). However, for the
Tagged:
0