Repository navigation
docs: document the NativeForm component - #6625
Draft
vaadin-bot wants to merge 1 commit into
Draft
vaadin-bot wants to merge 1 commit into
vaadin-bot wants to merge 1 commit into
Conversation
Add a Native Form section to the HTML Elements page covering NativeForm, its submit behavior, and the Input/NativeButton setters that support it. List NativeForm.setAction/setUnsafeAction among the methods validated against safe URL schemes on the Cross-Site Scripting page. Documents vaadin/flow#26807 (`11b91d5858a3e03644cde1e86f97f75e63daa997`).
Contributor
Preview DeploymentThis PR has been deployed for preview. URL: https://docs-preview-pr-6625.fly.dev Changed pagesAdded content is highlighted in green; removed content is marked in red on each page.
Built from bc3ca70 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Documentation for vaadin/flow#26807 by
@totally-not-ai[bot].Note
The source pull request is merged, so this documentation describes the final shape of the change. Please review it and mark it ready for review.
Change categories: NEW_FEATURE
articles/components/html-elements/index.adocNativeFormrow to the HTML elements table and a new Native Form section describing how the browser submits the form, theInput/NativeButtonsetters that support it, the safe-URL-scheme check on the action, the CSRF token a Spring Security endpoint needs, and the restriction against nested forms.articles/flow/security/protections/vulnerabilities.adocNativeForm.setAction(String)andNativeForm.setUnsafeAction(String)to the list of methods validated against, and able to bypass, the safe URL schemes check.Auto-generated by the Documentation Bot — review before merging.