Clicky

Microsoft Technical Bulletins

The latest updates for all the Microsoft Products you use every day.

Written by Brad

Categories: SharePoint Online

July 27, 2022

Blog Home

Microsoft Lists Formatting: Update to filepreview elmType in custom formatters

SharePoint Online, SharePoint Development Services

From Microsoft Corporation
Technical Bulletin MC397486 · Published Jul 5, 2022

Message Summary

Custom Formatters allow users to write declarative JSON to emit HTML. The “filepreview” elmType was introduced to show thumbnails in SharePoint document libraries with a fallback “fileType icon” for the cases when thumbnails aren’t available.

We came across a usage of this feature that allowed embedding external URLs on a SharePoint list. While we understand the powerful scenarios this could open up, we would want to make sure we permit it post due diligence and after addressing any security concerns.

As an immediate step, we are restricting the feature to what it was initially intended to achieve, i.e., to show file thumbnails/previews.

When this will happen:

This change has been rolled out and we apologize for not providing notice prior.

How this will affect your organization:

All URLs other than those which match the ones for thumbnails will be blocked. Users will not be able to embed external resources like SharePoint pages, lists, WXP files, Stream videos and YouTube videos on a SharePoint list.

At a late time, we will allow-list the URLs in a phased manner after ensuring the feature does not expose any security loopholes or lead to performance degradation. A separate communication will follow for the same. 

What you need to do to prepare:

No action is required. You may consider notifying users about this change and update your training and documentation as appropriate.

More information:

TECHNICAL BULLETIN END

QuixTec provides this and other technical bulletins unaltered from Microsoft. As an authorized Microsoft Partner, we ensure that all our solutions we deliver to you include the latest Microsoft updates.

ABOUT US: QuixTec, LLC is a U.S. certified Veteran Owned, modern DevOps organization with experience in a plethora of IT Software Languages.  As a Microsoft Partner, we specialize in Discounted Microsoft Software Licensing, Microsoft SharePoint, Microsoft365 and HTML5 technologies for small to enterprise-sized organizations. Our dedication to IT excellence is evidenced through our PECB ISO Certification training center. The only PECB ISO authorized center in Washington State. QuixTec, implements and provides training for upcoming open-source digital marketing services that are taking the industry by storm. This solution, used by over 100,000 businesses, provides enterprise level marketing capabilities at startup rates. The founder, Richard, has 30 years of experience working with several notable companies that include World Vision, Expedia, Microsoft, Levi Strauss, NASA, Boeing Aerospace, Los Alamos National Laboratory, and the U.S. Air Force, to name a few.  QuixTec is in the Seattle area. Phone today for a free consultation and project estimate.

(425) 367-9025

LEARN MORE

SharePoint Development ServicesSharePoint DevelopmentCustom Software DevelopmentMicrosoft 365 ExpertsMicrosoft 365IT Staffing ServicesIT StaffingWordPress Development ServicesForm Email ValidationMicrosoft LicensingMautic Open Source MarketingBest IT Staffing AgenciesIT Staffing Company

You May Also Like…

Select Lists templates include Power Automate flows

Select Lists templates include Power Automate flows

SharePoint Online, Microsoft Power Automate in Microsoft 365, SharePoint Development Services From Microsoft CorporationTechnical Bulletin MC394930 · Published Jun 24, 2022 Message Summary Lists ready-made templates are getting a boost....

SharePoint multilingual feature can be applied to team sites

SharePoint multilingual feature can be applied to team sites

SharePoint Online, SharePoint Development Services From Microsoft CorporationTechnical Bulletin MC390752 · Published Jun 9, 2022 Message Summary The SharePoint multilingual feature is expanding to include team sites. This new release...