check before: 2022-07-20
Product:
Microsoft Lists, SharePoint, Stream
Platform:
Online, World tenant
Status:
Change type:
User impact, Admin impact
Links:
Details:
Custom Formatters allow users to write declarative JSON to emit HTML. The "filepreview" elmType was introduced to show thumbnails in SharePoint document libraries with a fallback "fileType icon" for the cases when thumbnails aren't available.
We came across a usage of this feature that allowed embedding external URLs on a SharePoint list. While we understand the powerful scenarios this could open up, we would want to make sure we permit it post due diligence and after addressing any security concerns.
As an immediate step, we are restricting the feature to what it was initially intended to achieve, i.e., to show file thumbnails/previews.
[When this will happen:]
This change has been rolled out and we apologize for not providing notice prior.
Change Category:
XXXXXXX ...
Scope:
XXXXXXX ...
Release Phase:
Created:
2022-07-06
updated:
2022-07-06
the free basic plan is required to see all details. Sign up here
A cloudsocut.one plan is required to see all the changed details. If you are already a customer, choose login.
If you are new to cloudscout.one please choose a plan.
Last updated 12 months ago
