Instructions field not escaping < and >, breaking the fields

• jamieschmid

• November 21, 2019 at 11:57 am

It looks like the instructions field is not being escaped for < and > characters and is rendering anything between them as HTML. Most tags are automatically closed by the browser, but <iframe> specifically breaks it because it busts out the whole HTML #document.

The tags render as HTML in all fields I tested including children in a repeater.

My specific use case was giving instructions on how to paste an iframe into the field.

• John Huebner

• November 22, 2019 at 5:25 am

If you want to include HTML in your instructions for a field you need to use < and > when writing your instructions.

• jamieschmid

• October 6, 2021 at 4:02 am

Actually I was just instructing the user to do something with an <iframe> code block, so trying to write “<iframe>” – can you escape the < >?

• John Huebner

• October 6, 2021 at 8:41 am

Sorry, hard to put in this site as well. Remove the sapces from this

The last I know you could use & lt; and & gt; in the message field to show html.