# Manifest - allowCodeGenerationFromStrings? **URL:** \ **Category:** Premiere Pro\ **Created:** [December 6, 2025, 7:15pm UTC](https://forums.creativeclouddeveloper.com/t/manifest-allowcodegenerationfromstrings/11591 "2025-12-06T19:15:22Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![Nico\_Autokroma](https://sea1.discourse-cdn.com/flex015/user_avatar/forums.creativeclouddeveloper.com/nico_autokroma/32/4826_2.png) [@Nico\_Autokroma](https://forums.creativeclouddeveloper.com/u/Nico_Autokroma)\ **Post date:** [December 6, 2025, 7:15pm UTC](https://forums.creativeclouddeveloper.com/t/manifest-allowcodegenerationfromstrings/11591/1 "2025-12-06T19:15:22Z")
Hello there 🙂 In my panel, I have several different html files (for better code organization), so I need to load them dynamically in JS. Some of those html loaded files contain onClick events (like buttons), and I get these errors when loading htmls (got while setting innerHtml of my main index.html elements and replacing with content of the other htmls). > Uncaught UxpRuntimeError: Refusing to load event handler tag as executable code. The node was injected using innerHTML. I tried to define `allowCodeGenerationFromStrings` in the manifest to true (inside the `requiredPermissions` object), but it does not change anything. However the description of this property should fix it if I understood it correctly ? Or did I miss something ? Tested in Win11, PrPro 25.6.2 ---
**Author:** ![Karmalakas](https://sea1.discourse-cdn.com/flex015/user_avatar/forums.creativeclouddeveloper.com/karmalakas/32/1048_2.png) [@Karmalakas](https://forums.creativeclouddeveloper.com/u/Karmalakas)\ **Post date:** [December 6, 2025, 7:32pm UTC](https://forums.creativeclouddeveloper.com/t/manifest-allowcodegenerationfromstrings/11591/2 "2025-12-06T19:32:44Z")
You should remove JS from HTML files and move to a dedicated JS file, where you find the required element by ID or some other selector and add event listener to it. Something like: ```js document.querySelector('#element-id').addEventListener('click', (event) => { // handle your click here }) ``` `allowCodeGenerationFromStrings` should be used only during development, usually for something like Webpack. Not sure about PremierePro, but at least Ps plugins with this enabled are not approved to the Marketplace ---
**Author:** ![MarcClown](https://sea1.discourse-cdn.com/flex015/user_avatar/forums.creativeclouddeveloper.com/marcclown/32/4778_2.png) [@MarcClown](https://forums.creativeclouddeveloper.com/u/MarcClown)\ **Post date:** [December 7, 2025, 8:19pm UTC](https://forums.creativeclouddeveloper.com/t/manifest-allowcodegenerationfromstrings/11591/3 "2025-12-07T20:19:29Z")
Hmmm…. While I am not impacted by this., this is not obvious and IMO poor customer experience. @bbb_999 Maybe advocate on customer behalf to have this change to be explicit in next release ? Either change the name (expl: `debug_allowCodeGenerationFromStrings`) or emit a warning when starting the plugin or … ---
**Author:** ![bbb\_999](https://sea1.discourse-cdn.com/flex015/user_avatar/forums.creativeclouddeveloper.com/bbb_999/32/4247_2.png) [@bbb\_999](https://forums.creativeclouddeveloper.com/u/bbb_999)\ **Post date:** [December 10, 2025, 5:01pm UTC](https://forums.creativeclouddeveloper.com/t/manifest-allowcodegenerationfromstrings/11591/4 "2025-12-10T17:01:19Z")
Sorry, I’m unclear on what you’re hoping I’ll advocate for…? ---
**Author:** ![MarcClown](https://sea1.discourse-cdn.com/flex015/user_avatar/forums.creativeclouddeveloper.com/marcclown/32/4778_2.png) [@MarcClown](https://forums.creativeclouddeveloper.com/u/MarcClown)\ **Post date:** [December 11, 2025, 11:49am UTC](https://forums.creativeclouddeveloper.com/t/manifest-allowcodegenerationfromstrings/11591/5 "2025-12-11T11:49:13Z")
Per comment from Karmalakas I guess 2 things. > [@Karmalakas](#): > > `allowCodeGenerationFromStrings` **should be used only during development** […] Not sure about PremierePro, but at least Ps plugins with this enabled are **not approved to the Marketplace** 1 \* It would make sense to make it painfully obvious to UXP developer that this property should not be used for production UXP code (esp if doing so would be rejection from the marketplace). Any options that make it obvious that this should NOT be used for production is fine. For expl : - Rename this property to something like “debugOnly\_allowCodeGenerationFromStrings“ - Mark it as private / not available - Emit a warning when dev lauch on its local machine (maybe a dialog box popup from UDT upon launch ) - … or whatever you think make sense 2 \* Have the docs reflect this - it appears to say it is OK (albeit not recommended). > **[Plugin manifest](https://developer.adobe.com/premiere-pro/uxp/plugins/concepts/manifest/#allowcodegenerationfromstrings)** > > The Manifest file is a JSON file located at the root of the plugin bundle that contains metadata about the plugin. | Details of plugin manifest and its configuration. > **[HTML Events and Listeners](https://developer.adobe.com/premiere-pro/uxp/resources/recipes/html-events/#example-inline-event-handlers)** > > Handle user interactions using event listeners in JavaScript or inline event handlers ![image](https://us1.discourse-cdn.com/flex015/uploads/xdplugins/original/2X/6/687f9a0a493071d8644d68f1ebffdb2ea4ce03f7.png) ![image](https://us1.discourse-cdn.com/flex015/uploads/xdplugins/original/2X/0/04b3cb730bce68bc73a591578519cedeb5476cff.png)