Prime Community Forum

I'm viewing messages from the server with MessageService. If this message contains html tags, MessageService displays it as html. This causes the XSS vulnerability. Therefore, messages displayed with MessageService must be plain text.

Hi,
Thank you for your feedback. We will talk about this with our team and will offer you a solution.