View Component 25.2
View Component Help

# StripScript

Set `StripScript` to `True` to remove script tags and other executable code from input HTML documents. When you also set NoACI to `True` in the View action, the View component adds HTTP headers to the output to prevent Web browsers from running any scripts embedded in the HTML. You can use the ContentSecurityPolicy configuration parameter to modify the headers that View adds.

NOTE: Setting `StripScript` to `True` can significantly reduce the speed of the View action.

The `StripScript` parameter removes many known forms of script and code. However, for more complete security, OpenText recommends that you use a Web Application Firewall (WAF) with the View component.

You can use the StripScript parameter in the `[Viewing]` section of the configuration file to specify the default.

Actions: | View
Type: | Boolean
Default: | False
Example: | `StripScript=True`
See Also: | ContentSecurityPolicy configuration parameter StripScript configuration parameter

Copyright 2025 Open Text
Version 25.2 | Last updated April 2025

Send documentation feedback

Close

Send documentation feedback

To send feedback using your default email client, open an email window.

Otherwise, send your feedback and the information below to MFI-swpdl.idoldocsfeedback@opentext.com.

We appreciate your feedback!

Product: Knowledge Discovery View Component 25.2

Topic Title: StripScript