APSB11-23

[Guest]

I'm trying to understand how this update resolves the cross-site scripting issue.  We had our Help Desk apply the update to our RoboHelp 8.0.2.208 version, built the xpj, and found the suspicious code still exists.

[Captiv8r]

Hi there

While I'm not in a position to provide specifics about exactly HOW any update resolves a scripting issue, I can tell you that I've seen many thousands of users successfully using RoboHelp without worrying about it. Unless your personal development PC has been hacked in some way that would cause malicious code to be propagated from your machine, odds are you are perfectly safe and whomever is sounding the alarms about some perceived threat may be a bit over zealous.

I suspect the issue here is one that occurs because of the JavaScript code used to call other items in different frames of a WebHelp or FlashHelp frameset. If you wish to produce an output that doesn't have this and you are using RoboHelp 10 or 11, try the Multiscreen or HTML 5 output. It doesn't use framesets.

Cheers... Rick