You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
After some discussion about how to implement some of the more advanced field formatters we'd like to implement the ability to use custom scripts to do formatting. The problem becomes, how do we do it safely?
All the user to type scripts into the web interface. Pros: Nice, simple, quick. Cons: Excessively unsafe. If there's a way to do this safely I've never seen it.
Require scripts be stored server side. Probably the right way to go. Pros: If you don't have access to the server, you can't add scripts. That's also the Con.
In theory this will already be possible due to #2731. The entirety of this ticket may involve adding a server API endpoint to list the available script formatters and make them available via a drop down in the UI
We need to spec out what the function should take, and if it should be angular-y. There are some issue with bringing in too much functionality here. For example if we allow it to inject html, or get ahold of the element containing the value we're going to have a hard time implementing server side chart rendering without something like PhantomJS.
The text was updated successfully, but these errors were encountered:
rashidkpc
changed the title
Custom script formatters
Script field formatters
Apr 13, 2015
After some discussion about how to implement some of the more advanced field formatters we'd like to implement the ability to use custom scripts to do formatting. The problem becomes, how do we do it safely?
In theory this will already be possible due to #2731. The entirety of this ticket may involve adding a server API endpoint to list the available script formatters and make them available via a drop down in the UI
We need to spec out what the function should take, and if it should be angular-y. There are some issue with bringing in too much functionality here. For example if we allow it to inject html, or get ahold of the element containing the value we're going to have a hard time implementing server side chart rendering without something like PhantomJS.
The text was updated successfully, but these errors were encountered: