Need Robohelp to stop generating "document.location.href = strUrl.substring(0, n);"

[Tony_Stephens2]

This javascript is causing problems from appscans.  I need to remove it from the generated code. 

I've removed every breadcrumb, TOC, link, etc from my generated code; but the javascript still appears there.  How do I get rid of it?

I'm using RH8.

Thanks.

Tony

[Captiv8r]

Question here

Why is it causing you grief?

Have you tried turning off the option labeled "Show navigation pane link in topics"?

Cheers... Rick

Helpful and Handy Links RoboHelp Wish Form/Bug Reporting Form Begin learning RoboHelp HTML 7, 8 or 9 within the day! Adobe Certified RoboHelp HTML Training SorcerStone Blog RoboHelp eBooks

[Tony_Stephens2]

Because the security people don't like it; as it's a potential XSS Security Vulnerability. 

I've turned off all the links.  The page renders with no links in it at this point; stll the script is there.

[Peter Grainge]

We've seen this scenario before. Someone uses a tool to report security issues, fair enough. The tool then reports that webhelp is about to blow the planet to smitherines. They go back to the tool vendor and say "hey, this is standard output from RoboHelp and is not causing anyone any grief". The tool vendor then checks how their tool works and finds it is a false result. Peace ensues.

Try challenging them.

---

See www.grainge.org for RoboHelp and Authoring tips

@petergrainge