Base64 Images in HTML Widget

[samryanturner]

Has anyone had any luck embedding base64 encoded png's in the alert view HTML widget?

I'm setting a context value to "<img src="data&colon;image/png;base64, BASE64STRING>" but it's just rendering the name of the context value key.

If I punch the value that is assigned to the key into the widget it works fine, seems to be an issue with placeholders.

[mikewilusz]

I have done this as part of a blog post I did last year: https://medium.com/@cloudymike/building-a-screenshot-api-service-for-google-secops-soar-39cd9ad5a0ff

-mike

[samryanturner]

Thanks Mike, I've been using this blog post to help guide some of the HTML parts - awesome work by the way.

Our setup is slightly different in that we're converting the UTF-8 of a CDN hosted PNG into a base64 string. The base64 is valid along with the HTML it's added into within our custom action. If I paste it statically into the HTML widget it all renders fine. However if I use any form of placeholder with these values it displays as attached.

[mokatsu]

Is the screenshot from the html editor or from an actual case? The editor does not render placeholders. The only way to test if it work is to create a new case and have the playbook run to create the view.

[samryanturner]

It's the actual alert after the PB has been executed to change the view.

[mokatsu]

So the only time I see the placeholder being used is when the action does not return anything. (meaning it the output field doesnt exist at all) That is when the platform shows this. I suggest if you havent done it yet, trouble shoot the action. Ensure that it is running and returning a value.

[samryanturner]

I've raised a support ticket. The value is absolutely being set from the action to the correct HTML that renders fine if I statically paste it into the widget.

Seems to be some issue with placeholders (at least in my environment).