<@U856E2SEA> I'm trying to do something sort of ri...
# suiteqla
Alan Fitch
09/09/2021, 1:53 PM@tdietrich I'm trying to do something sort of risky (in sandbox). I want to select
<script>nlapisubmitfield(...)</script>t
tdietrich
09/09/2021, 3:26 PMNot sure I'm following you...
a
Alan Fitch
09/09/2021, 3:28 PMSo if you select
'<b>' || transaction.id || '<b>'t
tdietrich
09/09/2021, 3:29 PMI don't see why you couldn't do that.
tdietrich
09/09/2021, 3:30 PMInteresting idea though.
a
Alan Fitch
09/09/2021, 3:31 PMI have to look into it more how it renders it. So far it isn't working.
m
michoel
09/10/2021, 1:16 AMThat's technically an XSS attack. NetSuite used to be really poor in protecting against those but recently has plugged the major holes.
michoel
09/10/2021, 1:18 AMIf you want a quick and dirty mass update like that, I'd select the 'nlapiSubmitFields's and then paste them into the browser console to actually run. You will probably get through a couple hundred before you run out of governance and need to refresh the page
t
tdietrich
09/10/2021, 9:54 AMI guess that technically it can be seen as an XSS attack, except that it lacks anything that could be seen as malicious. Regardless, I don't think I'd use this approach to update data.
2 Views