Allow <script> tags in edited content

2 posts, 0 answers
  1. Wolfgang Kamir
    Wolfgang Kamir avatar
    80 posts
    Member since:
    Jul 2006

    Posted 27 Jul 2014 Link to this post

    HI dear forum members,

    is it possible to allow editing and displaying <script> tags with the Kendo UI Editor? What happens is, that any <script> tag that I edit (with the HTML editor) gets replaced with a <telerik:script> tag when written to the page.

    What is this behaviour supposed to do/prevent?

    Of course I know that this can be a security risk, but in this case our user (CMS user) has a good reason for wanting to do this and no easy workaround...

    Kind regards,
    Wolfgang
  2. Alexander Popov
    Admin
    Alexander Popov avatar
    1416 posts

    Posted 30 Jul 2014 Link to this post

    Hello Wolfgang,

    The <script> tags are indeed not shown when the Editor is initialized mainly for security reasons. You can however, manually set the encoded value right after the initialization, as shown in this example.

    Regards,
    Alexander Popov
    Telerik
     

    Check out the Telerik Platform - the only platform that combines a rich set of UI tools with powerful cloud services to develop web, hybrid and native mobile apps.

     
  3. UI for ASP.NET MVC is VS 2017 Ready
Back to Top