In FlowBoost webhooks, use x-user headers to hide secrets from non-admins

Starting from the new v22, use x-user- headers to pass any secret stuff to FlowBoost. Custom headers don’t show up in the Marketo Activity Log, so only Admins know about them.

Displaying and storing form-entered email addresses in lowercase

You probably know that email addresses are teeeeeechnically case-sensitive but, like most sensible creatures, you treat them as if they’re case-insensitive. (As Marketo Smart Lists obviously do!) Wouldn’t

A simple way to output query param values in the page body

💡This code does not work in any version of Internet Explorer, as it relies on URLSeachParams and Custom Elements v1. An earlier post showed how to append form field values

You cleared the Munchkin cookie from a form post, but you forgot the mkt_tok

Clearing the Munchkin cookie does one thing, and does it well. But chances are you want this other thing, too.

Velocitip: the less than ﹤ and greater than ﹥ operators fail silently with Strings (VTL ain’t JavaScript!)

Velocity is in essence a way a more “sugary” way to write Java, and has almost nothing in common with with JavaScript. But even I forget sometimes and think it plays by JS rules.

Inserting ﹤style﹥ elements into mktoText areas (without having ’em stripped out)

Marketo gets curiously angry when you try to add <style> elements in the Rich Text Editor, though such elements can make strategic sense. They don’t apply the same punishment to <script> elements nor custom elements, so that gives us a workaround.

Stop email clients from hyperlinking text that’s merely “URL-like”

Call it an unwelcome feature, call it a bug, call it a security vulnerability. Whatever you call it, here’s how to call it off (mostly).

Velocitip: Reformat phone numbers for local display and “deformat” numbers for tel: links

Phone numbers can take many formats (Marketo, like most apps, treats them as strings under the hood). If you want to use a standard format in outbound emails, Velocity can help.