Anyone know if there is a way to have a url link on the dashboard? Looking to have this option to get quick access to a 3rd party site we use for energy monitoring, Eragy and eGauge.
AFAICT, you would have to modify Vera’s [tt]HTML[/tt] files ([tt]/www/cmh/index.html[/tt]?), see [tt]http://forum.micasaverde.com/index.php/topic,7245.msg46289.html#msg46289[/tt].
You could also use HTML injection in a variable displayed on the dashboard, though I don’t think it will work on UI5.
[tt]HTML[/tt] injection of links does work on UI5 device tabs (see [tt]DAD[/tt], tab ‘Seimological data’ → ‘Map:’).
@mcvflorin,
Should you really be recommending using a serious security vulnerability in the MiOS product as a feature?
What’s the tracking bug for adding the feature, as a supported feature, in the product?
@Ap15e
Adding URLs through HTML injection on dashboard doesn’t work.
@guessed
If it’s there, why not use it? But you’re right, this security vulnerability must be patched. I’ll talk to the UI developers about this.
[quote=“mcvflorin, post:6, topic:171070”]@guessed
If it’s there, why not use it? But you’re right, this security vulnerability must be patched. I’ll talk to the UI developers about this.[/quote]
I’m sure that the folks that broke into a certain well known US-based payment processor today used exactly that argument 8)
I don’t use HTML injection in my plugins because I don’t want to have to rewrite my plugins for when MCV finally fixes this bug. Also, I don’t want to inadvertently write reference code for those looking to engage in cross-site scripting.
Seriously, not escaping HTML is the web design rookie mistake equivalent to not escaping SQL. It reflects badly on the developers, not to mention the Little Bobby Tables effect.