Form Input Sanitization

Introduction

This article explains how to implement input sanitization in Joget to safeguard against malicious inputs that could lead to security risks or unpredictable behavior. In Joget, you can sanitize input values for the following form elements:

1. Text Area
2. Text Field
3. Custom HTML

How does it work?

1. Drag the Text Area, Text Field, and Custom HTML elements onto your form.
   
2. Insert the following HTML code into the Custom HTML element configuration. This serves as an example to display the sanitized value.
   

   <p>Custom HTML</p><input type="text" name="sample" value=""/>

3. For each form element, go to advanced options and check the Sanitize Input Value? option to activate input sanitization.
   
   
4. Develop CRUD (Create, Read, Update, Delete) functionality and test it by entering values of your choice into the three form fields.
   
   
5. Observe the Results:

• List Display: The sanitized values will appear as plain text in the list.
  
• Edit Mode: When editing a list row, the sanitized value in the Custom HTML element is visible.
  
• Database: The text area and text field values are stored in a sanitized format.
  

Download sample app

This guide provides a comprehensive approach to securely handling input in Joget forms, ensuring data integrity and protection from potential threats.