HTML Help text

[Brian Lancaster]

Does anybody know of a way to make it so that HTML shows in the help test now that ServiceNow is escaping it?   We obviously do not want to set glide.ui.escape_text to false.   Just wondering if there are any other workarounds before we have to upgrade to Fuji Patch 12 Hot fix 1.   We have tables setup to show what the different choices mean on a list collector.

[Blair5]

Venkat,

Not sure if I captured what you want to see but see attached.

[venkatiyer1]

Hi Blair,

We are in different releases and versions so that is why it is not working. When you upgrade to Geneva UI16, the code that i have suggested would work as ServiceNow has moved from Tables to Div for implemetation. The below script already suggested by Brian should work for your case. But you might want to flag this change as you might have to change this code once you move into Geneva UI16.

$j(function($){
       $('table.help_table td:first-child:not([data-htmlized=true])').each(function(){
               var help = $(this);
               help.data('htmlized','true').html(help.text());
       });
});

[Blair5]

Venkat,

I've just decided to use UI pages where we have links. That solved my issue and thankfully there were only a handful that needed to be updated.

Thanks for your help.

[venkatiyer1]

Thanks for the screenshot, it was very helpful.

[David Christian]

I found this script and we are looking at using this:

function onLoad() {  

  // plugin gets initialized later so it needs settimeout to ensure the script is applied later  

  window.setTimeout(function(){  

  $$("div.sc-help-text").each(function(item){  

var textValue = item.innerText;  

$(item).update(textValue);  

});  

  }, 0);  

}  

and are only using it to format the text in the Help Text field.   Does anyone know if that opens it up to the XSS vulnerability that the ServiceNow talks about in: ServiceNow KB: PRB663858: More information tag on Service Catalog Variables turns HTML into escaped ... ?   Does anyone run security scans on their public portal for vulnerability?