DayPilot.Month.xssProtection

The xssProtection property (string) enables the built-in cross-site scripting (XSS) protection.

Declaration

DayPilot.Month.xssProtection

Possible Values

• "Enabled" - HTML-encodes text strings supplied through the API.

• "Disabled" - leaves developer-supplied text strings unescaped.

Default Value

"Enabled"

Notes

When XSS protection is enabled, text values provided through the API are escaped automatically before rendering. Disable it only when you need to render trusted HTML content.

Examples

JavaScript

const dp = new DayPilot.Month("dp", {
  xssProtection: "Disabled",
  // ...
});
dp.init();

Angular

<daypilot-month [config]="config"></daypilot-month>

config: DayPilot.MonthConfig = {
  xssProtection: "Disabled",
  // ...
};

React

<DayPilotMonth
  xssProtection="Disabled"
  {/* ... */}
/>

Vue

<DayPilotMonth
  xssProtection="Disabled"
  <!-- ... -->
/>

See Also

DayPilot.Month Class