RFE Can hyperlinks be added to comments (if they can't already).

[Andreas Ericsson]

Stanley Hopcroft wrote:
> Dear Ladies and Gentlemen,
> 
> Is it possible to add a hyperlink to a comment with Nag 1.x ?
> 
> Trying to do so results in the CGI echoing the unrendered HTML eg
> 
> Wed Jul 07 09:44:19 EXTERNAL COMMAND: ADD_SVC_COMMENT;asterix;COMS 
> ad-hoc check;1;Stanley Hopcroft;foo sez a 
> href='http://foo_host/cgi-bin/coms_graph_deltas?INT=-2h'graph/a
> 
> and for good reason since the <a>, and </a> tags are stripped.
> 
> Presumably this is because the '<' and '>' chars are stripped from user 
> input for security reasons.
> 
> Having a link in a comment may be useful - particuarly an
> acknowledgement - to take the CGI user directly to an associated
> 
> . a request/'trouble ticket' (from RT for example)
> 
> . a change management page
> 
> Is there any sensible and safe way of doing this ?
> 

Yes. Install Mozilla Firefox and download the extension 'plaintext 
hyperlinks'. Then you can enter your links as such 
'http://foo.whatever.com', and Mozilla will recognize it.

> Removing the '<' and '>' from the list of chars that will stripped from
> user input doesn't sound a good idea. The only thing that comes to mind
> is a primitive address tag recogniser in the comment handling code.
> 

Could be a good thing, so long as it's added on the display end of the 
comment-code.

-- 
Sourcerer / Andreas Ericsson
OP5 AB
+46 (0)733 709032
andreas.ericsson at op5.se


-------------------------------------------------------
This SF.Net email sponsored by Black Hat Briefings & Training.
Attend Black Hat Briefings & Training, Las Vegas July 24-29 - 
digital self defense, top technical experts, no vendor pitches, 
unmatched networking opportunities. Visit www.blackhat.com
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null