Open topic with navigation

# StripScript

Set `StripScript` to `True` to remove script tags and other executable code from input HTML documents. When you also set NoACI to `True` in the View action, IDOL Server adds HTTP headers to the output to prevent Web browsers from running any scripts embedded in the HTML. You can use the ContentSecurityPolicy configuration parameter to modify the headers that View adds.

NOTE:

Setting `StripScript` to `True` can significantly reduce the speed of the View action.

The `StripScript` parameter removes many known forms of script and code. However, for more complete security, Micro Focus recommends that you use a Web Application Firewall (WAF) with the View component.

You can use the StripScript action parameter for the View action to override this default value.

Type: | Boolean
Default: | False
Required: | No
Configuration Section: | Viewing
Example: | `StripScript=True`
See Also: | StripScript action parameter

© 2018 EntIT Software LLC, a Micro Focus company | Send documentation feedback to Micro Focus Close Send documentation feedback To open the configured email client on this computer, open an email window. Otherwise, copy the information below to a web mail client, and send this email to swpdl.idoldocsfeedback@microfocus.com. We appreciate your feedback! Product: Topic Title: Help Topic: Feedback:

_FT_HTML5_bannerTitle.htm