Context
Change Type: Announcement
Product area: Application enablement & solutions
Component: Web SDK
Deployed at: eu.latest.cumulocity.com, apj.cumulocity.com, jp.cumulocity.com, cumulocity.com, us.cumulocity.com, emea.cumulocity.com
Technical details
Build artifact: ui-c8y (1023.0.0)
Internal ID: MTM-63358
Description
The HTML widget has been migrated from AngularJS to Angular and is now generally available (GA). This migration brings enhanced security features and improved JavaScript support.
Key improvements:
- Advanced security: The widget now includes strict HTML sanitization by default to protect against XSS.attacks.
- Better JavaScript support: An advanced mode enables you to write custom web components for more sophisticated use cases.
- Automatic migration: Existing AngularJS widgets will be automatically migrated to the new Angular implementation.
Important limitations:
- Web components: Can only be written by Application administrators.
- Disabling sanitization: The default strict sanitization can only be disabled by cloning the Cockpit application and adjusting the setting in the application configuration under Config > Application configuration.