or
The RadImageEditor control allowed saving image files (.png/.jpg/.gif) to an up-level folder on the server when the built-in storing of files is used. This issue did not affect implementations based on the content provider paragidm. It has been fixed since the Q1 2014 release of Telerik UI for ASP.NET AJAX (version 2014.1.225).
If you are using an older version of the controls and you do not wish to upgrade, there are two approaches that you can take in order to resolve the security issue:
void ImageEditor_ImageSaving(object sender, Telerik.Web.UI.ImageEditorSavingEventArgs e){ e.FileName = e.FileName.Replace("/", "");}
protected void BtnSave_Click(object sender, EventArgs e)
{if (Page.IsValid){ this.MyFormView.UpdateItem(true);}
}at System.Web.UI.ControlCollection.ControlCollectionEnumerator.MoveNext() at System.Web.UI.WebControls.DataBoundControlHelper.ExtractValuesFromBindableControls(IOrderedDictionary dictionary, Control container) at System.Web.UI.WebControls.DataBoundControlHelper.ExtractValuesFromBindableControls(IOrderedDictionary dictionary, Control container) at System.Web.UI.WebControls.DataBoundControlHelper.ExtractValuesFromBindableControls(IOrderedDictionary dictionary, Control container) at System.Web.UI.WebControls.DataBoundControlHelper.ExtractValuesFromBindableControls(IOrderedDictionary dictionary, Control container) at System.Web.UI.WebControls.DataBoundControlHelper.ExtractValuesFromBindableControls(IOrderedDictionary dictionary, Control container) at System.Web.UI.WebControls.DataBoundControlHelper.ExtractValuesFromBindableControls(IOrderedDictionary dictionary, Control container) at System.Web.UI.WebControls.DataBoundControlHelper.ExtractValuesFromBindableControls(IOrderedDictionary dictionary, Control container) at System.Web.UI.WebControls.DataBoundControlHelper.ExtractValuesFromBindableControls(IOrderedDictionary dictionary, Control container) at System.Web.UI.WebControls.DataBoundControlHelper.ExtractValuesFromBindableControls(IOrderedDictionary dictionary, Control container) at System.Web.UI.WebControls.DataBoundControlHelper.ExtractValuesFromBindableControls(IOrderedDictionary dictionary, Control container) at System.Web.UI.WebControls.DataBoundControlHelper.ExtractValuesFromBindableControls(IOrderedDictionary dictionary, Control container) at System.Web.UI.WebControls.DataBoundControlHelper.ExtractValuesFromBindableControls(IOrderedDictionary dictionary, Control container) at System.Web.UI.WebControls.DataBoundControlHelper.ExtractValuesFromBindableControls(IOrderedDictionary dictionary, Control container) at System.Web.UI.WebControls.DataBoundControlHelper.ExtractValuesFromBindableControls(IOrderedDictionary dictionary, Control container)<telerik:GridDateTimeColumn DataField="DeadlineDate" UniqueName="DeadlineDate" DataFormatString="{0:dd MMM yyyy}" HeaderText="Deadline" /><%@ Control Language="C#" AutoEventWireup="true" CodeBehind="GridViewTest.ascx.cs" Inherits="TestSolution.WebUI.UserControls.GridViewTest" %><%@ Register Assembly="Telerik.Web.UI" Namespace="Telerik.Web.UI" TagPrefix="telerik" %><telerik:RadGrid ID="TestRadGrid" runat="server" AllowFilteringByColumn="True" AutoGenerateColumns="false" AllowPaging="True" AllowSorting="True" CellSpacing="0" DataSourceID="TestDataSource" GridLines="None" Skin="Office2007"> <MasterTableView EditMode="InPlace" DataKeyNames="PeriodID"> <Columns> <telerik:GridBoundColumn DataField="PeriodID" UniqueName="PeriodID" Visible="false" /> <telerik:GridBoundColumn DataField="SpecificityID" UniqueName="SpecificityID" /> <telerik:GridDateTimeColumn DataField="DeadlineDate" UniqueName="DeadlineDate" DataFormatString="{0:dd MMM yyyy}" HeaderText="Deadline " /> <telerik:GridBoundColumn DataField="DeadlineDate" UniqueName="DeadlineDate" HeaderText="Deadline" /> <telerik:GridNumericColumn DataField="OutstandingAmountBeforeDeadline" UniqueName="OutstandingAmountBeforeDeadline" NumericType="Number" HeaderText="O/S Before Repayment" /> <telerik:GridNumericColumn DataField="InterestAmount" UniqueName="InterestAmount" NumericType="Number" HeaderText="Interest" /> <telerik:GridCheckBoxColumn DataField="ToDelete" UniqueName="ToDelete" HeaderText="Delete" /> <telerik:GridEditCommandColumn ButtonType="PushButton" InsertText="Insert" EditText="Edit" CancelText="Cancel" UniqueName="EditCommandColumn" /> </Columns> </MasterTableView></telerik:RadGrid><asp:ObjectDataSource ID="TestDataSource" runat="server" TypeName="TestSolution.WebUI.ObjectDataSource.TestDataSource" SelectMethod="GetTestTableByCriterias"> <SelectParameters> <asp:Parameter Name="TestType" Type="Int32" /> <asp:Parameter Name="SpecificityID" Type="Int32" /> </SelectParameters></asp:ObjectDataSource>An unhandled exception was generated during the execution of the
current web request. Information regarding the origin and location of the
exception can be identified using the exception stack trace below.
|
[NullReferenceException: Object reference not set to an instance of an object.] Telerik.Web.UI.Grid.Export.TableViewExporter.PdfExportRenderForm(HtmlTextWriter nullWriter, Control form) +347 System.Web.UI.Control.RenderChildrenInternal(HtmlTextWriter writer, ICollection children) +256 System.Web.UI.Control.RenderChildren(HtmlTextWriter writer) +19 System.Web.UI.HtmlControls.HtmlForm.RenderChildren(HtmlTextWriter writer) +8689033 System.Web.UI.HtmlControls.HtmlContainerControl.Render(HtmlTextWriter writer) +32 System.Web.UI.HtmlControls.HtmlForm.Render(HtmlTextWriter output) +51 System.Web.UI.Control.RenderControlInternal(HtmlTextWriter writer, ControlAdapter adapter) +27 System.Web.UI.Control.RenderControl(HtmlTextWriter writer, ControlAdapter adapter) +99 System.Web.UI.HtmlControls.HtmlForm.RenderControl(HtmlTextWriter writer) +40 Telerik.Web.UI.Grid.Export.TableViewExporter.PdfExportRenderPage(HtmlTextWriter nullWriter, Control page) +145 System.Web.UI.Control.RenderChildrenInternal(HtmlTextWriter writer, ICollection children) +256 System.Web.UI.Control.RenderChildren(HtmlTextWriter writer) +19 System.Web.UI.Page.Render(HtmlTextWriter writer) +29 System.Web.UI.Control.RenderControlInternal(HtmlTextWriter writer, ControlAdapter adapter) +27 System.Web.UI.Control.RenderControl(HtmlTextWriter writer, ControlAdapter adapter) +99 System.Web.UI.Control.RenderControl(HtmlTextWriter writer) +25 System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) +1266 |
myGrid.ExportSettings.Excel.Format = GridExcelExportFormat.Biff ; myGrid.MasterTableView.ExportToExcel();
