Skip to main content
fiservdaniel
Known Participant
May 19, 2020 12:42 PM UTC
Question

Security vulnerability in FM2015

When I publish Repsonsive HTML5 the resulting index.html file contains the following meta:

 

 

Exposing the "C:" drive is not allowed in our application. How do I remove this from the published file?

    This topic is closed to new replies. Start a new post to keep the conversation going.

    3 replies

    frameexpert
    Community Expert
    Community Expert
    May 19, 2020 4:25 PM UTC

    I don't think this information is exposed to the sts file so you probably can't alter it. You will probably have to post-process your html files to take it out.

    Translate
    www.frameexpert.com
    fiservdaniel
    Known Participant
    May 19, 2020 4:58 PM UTC

    I tried removing the meta line and then the file would not open. I am a novice, but it seems like the FM Responsive HTML5 needs that meta line to find and display contents in Edge or Chrome. Any idea what else I can try?

    Translate
    frameexpert
    Community Expert
    Community Expert
    May 19, 2020 5:41 PM UTC

    Instead of removing the whole line, can you just edit the content attribute? Try removing the path and just leave the file name.

    Translate
    www.frameexpert.com