Maximo Open Forum

 View Only
  • 1.  Can a video be embedded in a Maximo Rich Text Editor

    Posted 09-09-2020 09:19
    Currently on 7.6.0.8, but welcoming answers for all subsequent patches & versions:

    Is it possible to embed a video in a Rich Text Editor control?  The case in point, I'm creating a Solution record and would like to include a video clip in the Resolution.
    #EverythingMaximo
    #EndUser

    ------------------------------
    Travis Herron
    Pensacola Christian College
    ------------------------------


  • 2.  RE: Can a video be embedded in a Maximo Rich Text Editor

    Posted 09-10-2020 14:30

    The rich text editor will remove things like iframes which video sources like Youtube utilize to embed. There is a system property to control this (webclient.richtext.discardTags), but whether or not it obeys this list for the out of the box defaults or if this just exists to add additional things to exclude I'm not sure as I've never tried to remove something from it. Out of box it's also not set as live refreshable so you would need to restart the system after making the change. Assuming it worked, you would then just have to edit the HTML source of the resolution field to add in the iframe control. 

    This is removed for a reason though, so enable it with caution. Iframes can be used for malicious purposes, such as cross site scripting (XSS) attacks. And we've seen organizations copy & paste web pages for order confirmations as an example, and if that website had an iframe that would now be stored in the longdescription too. It wouldn't be specific to just solutions.

    Another option is to add a new control to Maximo that allows you to render an iframe. There are quite a few examples of where someone has added iframe controls to Maximo (such as http://vietmaximo.blogspot.com/2018/02/getting-started-with-maximos-custom.html). That would allow you to have a video player displayed without it being in the confines of the rich text editor. And you could build logic around this (either with some configuration or in the java code itself) to restrict it to certain domains that you trust to minimize the security risk. 

    The third option is to just add it as a hyperlink attachment. While it's useful to embed the video player, for most people opening a hyperlink, especially to identify the resolution to an issue is fine. 



    ------------------------------
    Steven Shull
    Projetech
    ------------------------------