Skip to main content
Level 2
Oct 22, 2021 4:20 PM UTC
Solved

Marketo forms: Prevent adding HTML links in open text field?

Does Marketo provide the ability to prevent users from adding html links within the Marketo form (Field Type: Text Area)? We had a phishing attempt on one of our contact us forms trying to take you to a malicious page. 

 

What do we need to adjust so these can’t happen?

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
SanfordWhiteman
SanfordWhitemanAccepted solution
User Group Leader
Oct 22, 2021 6:12 PM UTC

No, but you have to realize that mail clients (most notoriously Gmail) will hyperlink sequences of words that just.happen.to.have.periods.between.them. Even without or http:// or https://. So the solution is to throughly sanitize output, rather than trying to catch all types of input. I wrote a blog post about this a long time ago.

1 reply

SanfordWhiteman
User Group Leader
SanfordWhitemanUser Group LeaderAccepted solution
User Group Leader
Oct 22, 2021 6:12 PM UTC

No, but you have to realize that mail clients (most notoriously Gmail) will hyperlink sequences of words that just.happen.to.have.periods.between.them. Even without or http:// or https://. So the solution is to throughly sanitize output, rather than trying to catch all types of input. I wrote a blog post about this a long time ago.

Translate