Differences

This shows you the differences between two versions of the page.

--- 72:editor_unmanaged [2023/01/10 15:02] – ohh
+++ 72:editor_unmanaged [2024/02/15 00:00] (current) – external edit 127.0.0.1
@@ Line 1: / Line 1: @@
 ====== Unmanaged Sections ======
-Unmanaged sections are text sections that contain HTML code. This code cannot be modified by the rich-text editor directly. The Stages editor only offers a dialog window with no WYSIWYG options.
+Unmanaged Sections provide the ability to insert HTML code into a description text. They are called "unmanaged" because Stages does not validate this HTML code. Stages sends this code to the web browser unchanged.
-Unmanaged sections can be:
+** Considering IT security, this feature is disabled by default.  **Please get in touch with a Stages Product Consultant before enabling it.
-  * Created manually by using the **Unmanaged HTML Section**  button on the toolbar.
+Unmanaged Sections can be created
-  * Created by the validation/migration process
-Unmanaged sections can be changed or edited by double-clicking the **Unmanaged HTML Section**  symbol at the text position.
+  * manually using the **Unmanaged HTML Section**  button in the toolbar.
+  * automatically through the validation process when migrating from Stages 6 to Stages 7.
-Unmanaged sections can be deleted by simply deleting the **Unmanaged HTML Section**  symbol at the text position.
+To modify an Unmanaged Section, double-click the **Unmanaged HTML Section**  icon at the text position.
-** <font inherit/inherit;;#c0392b;;inherit>For security reasons, this feature is deactivated by default.</font> **Please, contact a Stages Product Consultant before activating this feature.
+To delete an Unmanaged Section, delete the **Unmanaged HTML Section**  icon at the text position.
+===== Example: Embed videos into process descriptions =====
+The following two configuration properties need to to be set for enabling the display and editing of unmanaged sections:
+<code>
+<!-- For editing HTML sections even when secure mode is active -->
+<property name="global.secureMode.allowHTMLPlugin" value="true" />
+<!-- For displaying HTML sections -->
+<property name="process.description.displayUnmanagedSections.enabled" value="true" />
+</code>
+In addition to this, displaying external content in iframes must be explicitly allowed:
+<code>
+<!-- For allowing iframes from YouTube and Vimeo -->
+<property name="global.secureMode.csp.additional.framesrc" value="https://www.youtube.com https://www.vimeo.com" />
+</code>
+When these three configuration properties are set, you should be able to insert the embed HTML code from the video site in an unmanaged section.
+**Warning:** modifying the configuration properties can impact the security of the system by enabling cross-site scripting. Please make sure that your security team approves this change.