From 845daf7853762e81685f8ed0db6639c242f950fb Mon Sep 17 00:00:00 2001 From: Leif Åstrand Date: Fri, 1 Dec 2017 09:30:43 +0200 Subject: Clarify ContentMode javadocs (#10395) * Don't refer to Label * Explicitly mention XSS risk with HTML --- shared/src/main/java/com/vaadin/shared/ui/ContentMode.java | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) (limited to 'shared/src') diff --git a/shared/src/main/java/com/vaadin/shared/ui/ContentMode.java b/shared/src/main/java/com/vaadin/shared/ui/ContentMode.java index 4c604f4291..4808935658 100644 --- a/shared/src/main/java/com/vaadin/shared/ui/ContentMode.java +++ b/shared/src/main/java/com/vaadin/shared/ui/ContentMode.java @@ -16,24 +16,25 @@ package com.vaadin.shared.ui; /** - * Content modes defining how the client should interpret a Label's value. + * Defines how the client should interpret textual values. * * @since 8.0 */ public enum ContentMode { /** - * Content mode, where the label contains only plain text. + * Textual values are displayed as plain text. */ TEXT, /** - * Content mode, where the label contains preformatted text. In this mode - * newlines are preserved when rendered on the screen. + * Textual values are displayed as preformatted text. In this mode newlines + * are preserved when rendered on the screen. */ PREFORMATTED, /** - * Content mode, where the label contains HTML. + * Textual values are interpreted and displayed as HTML. Care should be + * taken when using this mode to avoid Cross-site Scripting (XSS) issues. */ HTML -- cgit v1.2.3