Handling of JavaScript Content in Rich Text Field Entries by External Role Users

This notification is intended for accounts that contain rich text fields accessible to users with external roles. External roles provide access to your NetSuite account for users who are not employees of your company. These roles include Customer Center, Vendor Center, and Partner Center. Entries in these rich text fields in your account may include dynamic content implemented through JavaScript and may be made by external roles.

What is Changing?

Starting October 21st, 2024, JavaScript content in rich text field entries made by external role users will be removed before the value is stored. This change will allow only static content to remain in this field, helping to increase the protection of your account from potentially unexpected behavior of entries made by external users.