or
The RadImageEditor control allowed saving image files (.png/.jpg/.gif) to an up-level folder on the server when the built-in storing of files is used. This issue did not affect implementations based on the content provider paragidm. It has been fixed since the Q1 2014 release of Telerik UI for ASP.NET AJAX (version 2014.1.225).
If you are using an older version of the controls and you do not wish to upgrade, there are two approaches that you can take in order to resolve the security issue:
void
ImageEditor_ImageSaving(
object
sender, Telerik.Web.UI.ImageEditorSavingEventArgs e)
{
e.FileName = e.FileName.Replace(
"/"
,
""
);
}
protected
void
BtnSave_Click(
object
sender, EventArgs e)
{if
(Page.IsValid)
{
this
.MyFormView.UpdateItem(
true
);
}
}at System.Web.UI.ControlCollection.ControlCollectionEnumerator.MoveNext()
at System.Web.UI.WebControls.DataBoundControlHelper.ExtractValuesFromBindableControls(IOrderedDictionary dictionary, Control container)
at System.Web.UI.WebControls.DataBoundControlHelper.ExtractValuesFromBindableControls(IOrderedDictionary dictionary, Control container)
at System.Web.UI.WebControls.DataBoundControlHelper.ExtractValuesFromBindableControls(IOrderedDictionary dictionary, Control container)
at System.Web.UI.WebControls.DataBoundControlHelper.ExtractValuesFromBindableControls(IOrderedDictionary dictionary, Control container)
at System.Web.UI.WebControls.DataBoundControlHelper.ExtractValuesFromBindableControls(IOrderedDictionary dictionary, Control container)
at System.Web.UI.WebControls.DataBoundControlHelper.ExtractValuesFromBindableControls(IOrderedDictionary dictionary, Control container)
at System.Web.UI.WebControls.DataBoundControlHelper.ExtractValuesFromBindableControls(IOrderedDictionary dictionary, Control container)
at System.Web.UI.WebControls.DataBoundControlHelper.ExtractValuesFromBindableControls(IOrderedDictionary dictionary, Control container)
at System.Web.UI.WebControls.DataBoundControlHelper.ExtractValuesFromBindableControls(IOrderedDictionary dictionary, Control container)
at System.Web.UI.WebControls.DataBoundControlHelper.ExtractValuesFromBindableControls(IOrderedDictionary dictionary, Control container)
at System.Web.UI.WebControls.DataBoundControlHelper.ExtractValuesFromBindableControls(IOrderedDictionary dictionary, Control container)
at System.Web.UI.WebControls.DataBoundControlHelper.ExtractValuesFromBindableControls(IOrderedDictionary dictionary, Control container)
at System.Web.UI.WebControls.DataBoundControlHelper.ExtractValuesFromBindableControls(IOrderedDictionary dictionary, Control container)
at System.Web.UI.WebControls.DataBoundControlHelper.ExtractValuesFromBindableControls(IOrderedDictionary dictionary, Control container)
<
telerik:GridDateTimeColumn
DataField
=
"DeadlineDate"
UniqueName
=
"DeadlineDate"
DataFormatString
=
"{0:dd MMM yyyy}"
HeaderText
=
"Deadline"
/>
<%@ Control Language="C#" AutoEventWireup="true" CodeBehind="GridViewTest.ascx.cs"
Inherits="TestSolution.WebUI.UserControls.GridViewTest" %>
<%@ Register Assembly="Telerik.Web.UI" Namespace="Telerik.Web.UI" TagPrefix="telerik" %>
<
telerik:RadGrid
ID
=
"TestRadGrid"
runat
=
"server"
AllowFilteringByColumn
=
"True"
AutoGenerateColumns
=
"false"
AllowPaging
=
"True"
AllowSorting
=
"True"
CellSpacing
=
"0"
DataSourceID
=
"TestDataSource"
GridLines
=
"None"
Skin
=
"Office2007"
>
<
MasterTableView
EditMode
=
"InPlace"
DataKeyNames
=
"PeriodID"
>
<
Columns
>
<
telerik:GridBoundColumn
DataField
=
"PeriodID"
UniqueName
=
"PeriodID"
Visible
=
"false"
/>
<
telerik:GridBoundColumn
DataField
=
"SpecificityID"
UniqueName
=
"SpecificityID"
/>
<
telerik:GridDateTimeColumn
DataField
=
"DeadlineDate"
UniqueName
=
"DeadlineDate"
DataFormatString
=
"{0:dd MMM yyyy}"
HeaderText
=
"Deadline "
/>
<
telerik:GridBoundColumn
DataField
=
"DeadlineDate"
UniqueName
=
"DeadlineDate"
HeaderText
=
"Deadline"
/>
<
telerik:GridNumericColumn
DataField
=
"OutstandingAmountBeforeDeadline"
UniqueName
=
"OutstandingAmountBeforeDeadline"
NumericType
=
"Number"
HeaderText
=
"O/S Before Repayment"
/>
<
telerik:GridNumericColumn
DataField
=
"InterestAmount"
UniqueName
=
"InterestAmount"
NumericType
=
"Number"
HeaderText
=
"Interest"
/>
<
telerik:GridCheckBoxColumn
DataField
=
"ToDelete"
UniqueName
=
"ToDelete"
HeaderText
=
"Delete"
/>
<
telerik:GridEditCommandColumn
ButtonType
=
"PushButton"
InsertText
=
"Insert"
EditText
=
"Edit"
CancelText
=
"Cancel"
UniqueName
=
"EditCommandColumn"
/>
</
Columns
>
</
MasterTableView
>
</
telerik:RadGrid
>
<
asp:ObjectDataSource
ID
=
"TestDataSource"
runat
=
"server"
TypeName
=
"TestSolution.WebUI.ObjectDataSource.TestDataSource"
SelectMethod
=
"GetTestTableByCriterias"
>
<
SelectParameters
>
<
asp:Parameter
Name
=
"TestType"
Type
=
"Int32"
/>
<
asp:Parameter
Name
=
"SpecificityID"
Type
=
"Int32"
/>
</
SelectParameters
>
</
asp:ObjectDataSource
>
An unhandled exception was generated during the execution of the
current web request. Information regarding the origin and location of the
exception can be identified using the exception stack trace below.
|
[NullReferenceException: Object reference not set to an instance of an object.] Telerik.Web.UI.Grid.Export.TableViewExporter.PdfExportRenderForm(HtmlTextWriter nullWriter, Control form) +347 System.Web.UI.Control.RenderChildrenInternal(HtmlTextWriter writer, ICollection children) +256 System.Web.UI.Control.RenderChildren(HtmlTextWriter writer) +19 System.Web.UI.HtmlControls.HtmlForm.RenderChildren(HtmlTextWriter writer) +8689033 System.Web.UI.HtmlControls.HtmlContainerControl.Render(HtmlTextWriter writer) +32 System.Web.UI.HtmlControls.HtmlForm.Render(HtmlTextWriter output) +51 System.Web.UI.Control.RenderControlInternal(HtmlTextWriter writer, ControlAdapter adapter) +27 System.Web.UI.Control.RenderControl(HtmlTextWriter writer, ControlAdapter adapter) +99 System.Web.UI.HtmlControls.HtmlForm.RenderControl(HtmlTextWriter writer) +40 Telerik.Web.UI.Grid.Export.TableViewExporter.PdfExportRenderPage(HtmlTextWriter nullWriter, Control page) +145 System.Web.UI.Control.RenderChildrenInternal(HtmlTextWriter writer, ICollection children) +256 System.Web.UI.Control.RenderChildren(HtmlTextWriter writer) +19 System.Web.UI.Page.Render(HtmlTextWriter writer) +29 System.Web.UI.Control.RenderControlInternal(HtmlTextWriter writer, ControlAdapter adapter) +27 System.Web.UI.Control.RenderControl(HtmlTextWriter writer, ControlAdapter adapter) +99 System.Web.UI.Control.RenderControl(HtmlTextWriter writer) +25 System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) +1266 |