Telerik.AsyncUpload.ConfigurationEncryptionKey setting

[Mark Breen]

Hello,

 

Could anybody tell me which version of Telerik.Web.UI.dll FIRST started to use new setting "Telerik.AsyncUpload.ConfigurationEncryptionKey" in the web.config file for extra security for file upload?

Which version was the first to introduce this setting?

 

Thanks

[Marin Bratanov]

Hi Mark,

The first version is Q3 2012 SP1 (version 2012.3.1205), yet I strongly advise that you upgrade at least to R1 2017 where the Telerik.Upload.ConfigurationHashKey is implemented together with HMAC hashing.

Regards,

Marin Bratanov
Progress Telerik

[Mark Breen]

Hello Marin,

 

Thank you for your reply. I would like to ask one more question:

Which telerik controls uses this new setting Telerik.Upload.ConfigurationHashKey which is implemented in R1 2017?

Thanks

Tadas

[Marin Bratanov]

Hi Tadas,

By design, RadAsyncUpload and RadCloudUpload.

It can be a fallback key for other cases where encryption/hashing is needed in case other keys are not set. This includes dialogs by RadEditor and RadSpell, or URL generation by RadScriptManager or RadStyleSheetManager.

Regards,

Marin Bratanov
Progress Telerik