Questions on UI for ASP.NET AJAX Forum

1 answer

198 views

RadAjaxNamespace.js - HP Fortify - Cross Site Scripting Issue

I ran HP Fortify tool to check vulnerable code in application code base and found the security issue in RadAjaxNamespace.js file for Cross site scripting. The detail of the scan for vulnerable code is below. Please let us know how could we fix this issue as the method seems vulnerable to cross site scripting attacks.

Abstract: The method l1b() in RadAjaxNamespace.js sends unvalidated data to a web browser
on line 1, which can result in the browser executing malicious code.
Source: RadAjaxNamespace.js:1 Read ~localScope.oe.responseText()
-1 ( function (){ob=25; if (typeof(window.RadAjaxNamespace)=="undefined" ||
typeof(window.RadAjaxNamespace.Version)=="\x75\x6e\x64efin\x65\x64" ||
window.RadAjaxNamespace.Version<ob){window.RadAjaxNamespace=
{Version:ob,IsAsyncResponse: false ,LoadingPanels:{} ,ExistingScripts:{} ,IsInRequest:
false ,MaxRequestQueueSize: 5 } ; var AjaxNS=window.RadAjaxNamespace;
AjaxNS.EventManager= {Ob:null,lb:function (){try {if (this.Ob==null){ this.Ob=[];
AjaxNS.EventManager.Add(window,"\165nload",this.ib); }}c...
0 if (typeof(Sys) != "undefined"){if (Sys.Application != null &&
Sys.Application.notifyScriptLoaded != null){Sys.Application.notifyScriptLoaded();}}

Ajax

answered on 04 Sep 2013

4 answers

308 views

RadGrid Alrernate Row Data not display when button click event

Hello, All
Currently I am Working in RadGrid in bind all data with Edit and Delete Image Button, First time my page loading when Radgrid bind all data with proper css, but after when I click on every alternate row Edit Button then row data css is missing and not show border and css, I have attached image file and code

<asp:Panel ID="pnl6" runat="server" Style="display: none;">
                                    <telerik:RadAjaxPanel ID="RadAjaxPanel5" runat="server" LoadingPanelID="RALoading">
                                        <table id="tblNewViolation" runat="server" align="center" cellspacing="2" cellpadding="2"
                                            style="width: 98%;">
                                            <tr>
                                                <td colspan="2" align="left" class="header_title">New Violation
                                                </td>
                                            </tr>
                                            <tr>
                                                <td colspan="2" align="left">
                                                    <div class="hrstyle">
                                                    </div>
                                                </td>
                                            </tr>
                                             <tr>
                                                <td valign="top" align="right">
                                                    <asp:Label ID="lblResolutions" runat="server" CssClass="labelText" Text="Case # : "></asp:Label>
                                                </td>
                                                <td valign="top" align="left">
                                                    <telerik:RadComboBox ID="cmcCase" runat="server" Visible="false">
                                                    </telerik:RadComboBox>
                                                    <telerik:RadTextBox ID="txtNCCase" runat="server" MaxLength="200" Visible="false">
                                                    </telerik:RadTextBox>
                                                </td>
                                            </tr>
                                            <tr>
                                                <td valign="top" align="right">
                                                    <asp:Label ID="lblPre" runat="server" CssClass="labelText" Text="Services : "></asp:Label>
                                                </td>
                                                <td valign="top" align="left">
                                                    <telerik:RadComboBox ID="cmcServices" runat="server">
                                                    </telerik:RadComboBox>
                                                </td>
                                            </tr>
                                            <tr>
                                                <td valign="top" align="right">
                                                    <asp:Label ID="lblPreDefinedNotes" runat="server" CssClass="labelText" Text="Pre Defined Notes : "></asp:Label>
                                                    <span style="color: Red; font-size: 12px; font-weight: bold">*</span>
                                                </td>
                                                <td valign="top" align="left">
                                                    <telerik:RadComboBox ID="cmbPreDefinedNotes" runat="server" AutoPostBack="true" OnSelectedIndexChanged="cmbPreDefinedNotes_SelectedIndexChanged">
                                                    </telerik:RadComboBox>
                                                    <asp:CustomValidator ID="CustomValidator6" ErrorMessage="Please Select Pre Defined Notes"
                                                        SetFocusOnError="true" ControlToValidate="cmbPreDefinedNotes" ValidateEmptyText="true"
                                                        runat="server" ClientValidationFunction="validationFunction" Display="none" ValidationGroup="vsViolation"></asp:CustomValidator>
                                                </td>
                                            </tr>
                                            <tr>
                                                <td style="width: 15%" valign="top" align="right">
                                                    <asp:Label ID="lblShortDescription" runat="server" CssClass="labelText" Text="New Violation : "></asp:Label>
                                                    <span style="color: Red; font-size: 12px; font-weight: bold">*</span>
                                                </td>
                                                <td valign="top" align="left">
                                                    <telerik:RadTextBox ID="txtShortDescription" TextMode="MultiLine" runat="server" Height="100px" Width="493px">
                                                    </telerik:RadTextBox>
                                                    <asp:RequiredFieldValidator ID="reqShortDescription" runat="server" ValidationGroup="vsViolation"
                                                        SetFocusOnError="true" ErrorMessage="Please Enter New Violation" Display="none" ControlToValidate="txtShortDescription"></asp:RequiredFieldValidator>
                                                </td>
                                            </tr>

                                            <tr>
                                                <td colspan="2" align="left">
                                                    <div class="hrstyle">
                                                    </div>
                                                </td>
                                            </tr>
                                            <tr>
                                                <td colspan="2" align="center">
                                                    <telerik:RadButton ID="btnNVSave" runat="server" Text="Save" ValidationGroup="vsViolation" OnClick="btnNVSave_Click">
                                                    </telerik:RadButton>
                                                    <telerik:RadButton ID="btnNVCancel" runat="server" CausesValidation="false" Text="Cancel" OnClick="btnNVCancel_Click">
                                                    </telerik:RadButton>
                                                </td>
                                            </tr>
                                            <tr>
                                                <td colspan="7" align="left">
                                                    <div class="hrstyle">
                                                    </div>
                                                </td>
                                            </tr>
                                            <tr>
                                                <td colspan="4" align="left">
                                                    <telerik:RadGrid ID="grdViolation" runat="server" AllowPaging="True" AllowSorting="True"
                                                        AutoGenerateColumns="False" AllowAutomaticDeletes="false" AllowAutomaticUpdates="false"
                                                        OnNeedDataSource="grdViolation_NeedDataSource" OnItemCommand="grdViolation_ItemCommand">
                                                        <PagerStyle Mode="NextPrevAndNumeric"></PagerStyle>
                                                        <MasterTableView Width="100%" CommandItemDisplay="None" EditMode="InPlace" DataKeyNames="NewViolationPK">
                                                            <CommandItemSettings ShowAddNewRecordButton="false" />
                                                            <Columns>
                                                                <telerik:GridTemplateColumn HeaderText="CaseNo" ItemStyle-HorizontalAlign="Left" SortExpression="CaseNoFK">
                                                                    <ItemTemplate>
                                                                        <%# Eval("CaseNoFK") %>
                                                                    </ItemTemplate>
                                                                    <ItemStyle HorizontalAlign="Left" />
                                                                </telerik:GridTemplateColumn>
                                                                <telerik:GridTemplateColumn HeaderText="Pre Defined Notes" ItemStyle-HorizontalAlign="Left" SortExpression="PreDefinedNotesFK">
                                                                    <ItemTemplate>
                                                                        <%# Eval("PreDefinedNotesFK") %>
                                                                    </ItemTemplate>
                                                                    <ItemStyle HorizontalAlign="Left" />
                                                                </telerik:GridTemplateColumn>
                                                                <telerik:GridTemplateColumn HeaderText="Services" ItemStyle-HorizontalAlign="Left" SortExpression="ServicesFK">
                                                                    <ItemTemplate>
                                                                        <%# Eval("ServicesFK") %>
                                                                    </ItemTemplate>
                                                                    <ItemStyle HorizontalAlign="Left" />
                                                                </telerik:GridTemplateColumn>
                                                                <telerik:GridTemplateColumn HeaderStyle-HorizontalAlign="Center" HeaderText="Action"
                                                                    UniqueName="editdetail">
                                                                    <ItemTemplate>
                                                                           <asp:ImageButton ID="lnkEdit" runat="server" CommandArgument='<%#Eval("NewViolationPK") %>' ToolTip="Click to Edit" ImageUrl="../Images/edit.gif"
                                                                         CommandName="Edit" /><span style="padding-left:30px"></span>
                                                                         <asp:ImageButton ID="lnkDelete" runat="server" CommandArgument='<%#Eval("NewViolationPK") %>' ImageUrl="../Images/delete.png"
                                                                            CommandName="Delete" ToolTip="Click to Delete" OnClientClick="return confirm('Are you sure you want to delete this new violation record?');" ></asp:ImageButton >
                                                                    </ItemTemplate>
                                                                    <HeaderStyle HorizontalAlign="Center" />
                                                                </telerik:GridTemplateColumn>
                                                            </Columns>
                                                            <EditFormSettings>
                                                                <EditColumn Visible="false"></EditColumn>
                                                            </EditFormSettings>
                                                        </MasterTableView>
                                                    </telerik:RadGrid>
                                                </td>
                                            </tr>
                                        </table>
                                    </telerik:RadAjaxPanel>
                                </asp:Panel>

Have anybody can idea and give me solution ?

General Discussions

answered on 04 Sep 2013

5 answers

116 views

[Solved] Binding list to

Hi all

I have a list collection and want to bind this to a Radchart programmatically ie in the code-behind at the click of a button.

The Radchart needs to display all the items in the collection, do I need to loop through the list then bind?

I couldn't find any example where this is done programmatically.

Ram

Chart (Obsolete)

answered on 04 Sep 2013

1 answer

155 views

[Solved] Selecting Tile Client Side

I greatly enjoy this new control, however, the one thing I wish it did have was the ability to allow selection of tiles via the left mouse button click. So in order to do this, I was looking to see if there is a way to select a tile OnClientTileClicked event to simulate this. Do you have any examples?

TileList

answered on 04 Sep 2013

0 answers

85 views

Menubar Design Problem

Hi,
I have menubar which has blinking child node problem,seeing image u can get the arrow from where u can go to the circle then design stated blinking.
while slowely moving from FIRST OPENED node towards downside,as last element focus crossed then it start blinking
Reply Fast its urgent
Thanks

my code for reference

<%@ Page Language="C#" AutoEventWireup="true" CodeBehind="WebForm4.aspx.cs" Inherits="MenubarTrial.WebForm4" %>

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml">

<head runat="server">

<title></title>

</head>

<body>

<style>

#mmenu, #mmenu ul

{

margin: 0;

padding: 0;

list-style: none;

}

#mmenu

{

width: 960px;

margin: 60px auto;

border: 1px solid #222;

background-color: #111;

background-image: -moz-linear-gradient(#444, #111);

background-image: -webkit-gradient(linear, left top, left bottom, from(#444), to(#111));

background-image: -webkit-linear-gradient(#444, #111);

background-image: -o-linear-gradient(#444, #111);

background-image: -ms-linear-gradient(#444, #111);

background-image: linear-gradient(#444, #111);

-moz-border-radius: 6px;

-webkit-border-radius: 6px;

border-radius: 6px;

-moz-box-shadow: 0 1px 1px #777, 0 1px 0 #666 inset;

-webkit-box-shadow: 0 1px 1px #777, 0 1px 0 #666 inset;

box-shadow: 0 1px 1px #777, 0 1px 0 #666 inset;

}

#mmenu:before, #mmenu:after

{

content: "";

display: table;

}

#mmenu:after

{

clear: both;

}

#mmenu

{

zoom: 1;

}

#mmenu li

{

float: left;

border-right: 1px solid #222;

-moz-box-shadow: 1px 0 0 #444;

-webkit-box-shadow: 1px 0 0 #444;

box-shadow: 1px 0 0 #444;

position: relative;

}

#mmenu a

{

float: left;

padding: 12px 30px;

color: #999;

text-transform: uppercase;

font: bold 12px Arial, Helvetica;

text-decoration: none;

text-shadow: 0 1px 0 #000;

}

#mmenu li:hover > a

{

color: #fafafa;

}

*html #mmenu li a:hover

{

/* IE6 only */

color: #fafafa;

}

#mmenu ul

{

margin: 20px 0 0 0;

_margin: 0; /*IE6 only*/

opacity: 0;

visibility: hidden;

position: absolute;

top: 38px;

left: 0;

z-index: 9999;

background: #444;

background: -moz-linear-gradient(#444, #111);

background-image: -webkit-gradient(linear, left top, left bottom, from(#444), to(#111));

background: -webkit-linear-gradient(#444, #111);

background: -o-linear-gradient(#444, #111);

background: -ms-linear-gradient(#444, #111);

background: linear-gradient(#444, #111);

-moz-box-shadow: 0 -1px rgba(255,255,255,.3);

-webkit-box-shadow: 0 -1px 0 rgba(255,255,255,.3);

box-shadow: 0 -1px 0 rgba(255,255,255,.3);

-moz-border-radius: 3px;

-webkit-border-radius: 3px;

border-radius: 3px;

-webkit-transition: all .2s ease-in-out;

-moz-transition: all .2s ease-in-out;

-ms-transition: all .2s ease-in-out;

-o-transition: all .2s ease-in-out;

transition: all .2s ease-in-out;

}

#mmenu li:hover > ul

{

opacity: 1;

visibility: visible;

margin: 0;

}

#mmenu ul ul

{

top: 0;

left: 150px;

margin: 0 0 0 20px;

_margin: 0; /*IE6 only*/

-moz-box-shadow: -1px 0 0 rgba(255,255,255,.3);

-webkit-box-shadow: -1px 0 0 rgba(255,255,255,.3);

box-shadow: -1px 0 0 rgba(255,255,255,.3);

}

#mmenu ul li

{

float: none;

display: block;

border: 0;

_line-height: 0; /*IE6 only*/

-moz-box-shadow: 0 1px 0 #111, 0 2px 0 #666;

-webkit-box-shadow: 0 1px 0 #111, 0 2px 0 #666;

box-shadow: 0 1px 0 #111, 0 2px 0 #666;

}

#mmenu ul li:last-child

{

-moz-box-shadow: none;

-webkit-box-shadow: none;

box-shadow: none;

}

#mmenu ul a

{

padding: 10px;

width: 130px;

_height: 10px; /*IE6 only*/

display: block;

white-space: nowrap;

float: none;

text-transform: none;

}

#mmenu ul a:hover

{

background-color: #0186ba;

background-image: -moz-linear-gradient(#04acec, #0186ba);

background-image: -webkit-gradient(linear, left top, left bottom, from(#04acec), to(#0186ba));

background-image: -webkit-linear-gradient(#04acec, #0186ba);

background-image: -o-linear-gradient(#04acec, #0186ba);

background-image: -ms-linear-gradient(#04acec, #0186ba);

background-image: linear-gradient(#04acec, #0186ba);

}

#mmenu ul li:first-child > a

{

-moz-border-radius: 3px 3px 0 0;

-webkit-border-radius: 3px 3px 0 0;

border-radius: 3px 3px 0 0;

}

#mmenu ul li:first-child > a:after

{

content: '';

position: absolute;

left: 40px;

top: -6px;

border-left: 6px solid transparent;

border-right: 6px solid transparent;

border-bottom: 6px solid #444;

}

#mmenu ul ul li:first-child a:after

{

left: -6px;

top: 50%;

margin-top: -6px;

border-left: 0;

border-bottom: 6px solid transparent;

border-top: 6px solid transparent;

border-right: 6px solid #3b3b3b;

}

#mmenu ul li:first-child a:hover:after

{

border-bottom-color: #04acec;

}

#mmenu ul ul li:first-child a:hover:after

{

border-right-color: #0299d3;

border-bottom-color: transparent;

}

#mmenu ul li:last-child > a

{

-moz-border-radius: 0 0 3px 3px;

-webkit-border-radius: 0 0 3px 3px;

border-radius: 0 0 3px 3px;

}

</style>

<div id="mmenu">

<li><a href="xxxxxxxxxxxxxx.aspx">Home</a></li>

<li><a href="#">My Projects</a>

<ul>

<li><a href="#">N.Design Studio</a>

<ul>

<li><a href="#">Portfolio</a></li>

<li><a href="#">WordPress Themes</a></li>

<li><a href="#">Wallpapers</a></li>

<li><a href="#">Illustrator Tutorials</a></li>

</ul>

</li>

<li><a href="#">Web Designer Wall</a>

<ul>

<li><a href="#">Design Job Wall</a></li>

</ul>

</li>

<li><a href="#">IconDock</a></li>

<li><a href="#">Best Web Gallery</a></li>

</ul>

</li>

<li><a href="#">Multi-Levels</a>

<ul>

<li><a href="#">Team</a>

<ul>

<li><a href="#">Sub-Level Item</a></li>

<li><a href="#">Sub-Level Item</a>

<ul>

<li><a href="#">Sub-Level Item</a></li>

</ul>

</li>

<li><a href="#">Sub-Level Item</a></li>

</ul>

</li>

<li><a href="#">Entity</a>

<ul>

<li><a href="xxxxxxxxxxxxxxxxx.aspx">Entity Details</a></li>

<li><a href="xxxxxxxxxxxxx.aspx">Entity Permission</a></li>

</ul>

</li>

<li><a href="#">UserDatails</a>

<ul>

<li><a href="xxxxxxxxxxxxx.aspx">Change Password</a></li>

<li><a href="xxxxxxxxxxxxxx.aspx">UserDetails</a></li>

<li><a href="xxxxxxxxxxxx.aspx">GroupUser Creation</a></li>

</ul>

</li>

</ul>

</li>

<li><a href="#">Company Details</a>

<ul>

<li><a href="xxxxxxxxxxxx.aspx">CompanyDetails</a></li>

<li><a href="xxxxxxxxxxx.aspx">Group Details</a></li>

<li><a href="xxxxxxxxxxx.aspx">CompanyList</a></li>

</ul>

</li>

<li><a href="#">About</a></li>

<li><a href="#">Contact Us</a></li>

</div>

<form id="form1" runat="server">

<div>

</div>

</form>

</body>

</html>

Thanks

Menu

asked on 04 Sep 2013

1 answer

89 views

Fetch updated data

Hi

I am opening a radwindow from client that has an page inside it. On each opening I want the data to be fetched from the server rather than taking from cache or whatever I guess so. It seems the info is not updated properly on each opening.

Thanks
Ben

Window

answered on 04 Sep 2013

3 answers

217 views

[Solved] OnClientTransfering Validate item value exist in destination ListBox

I need to check item value when transfering if its already exist in destination listbox.
I came up with this code, but it always failed to get destination items length.

function validateItemTransfer(sender, args) {

debugger;

var items = args.get_items();

for (var i = 0; i < items.length; i++) {

var item = items[i];

var destinationItems = args.get_destinationListBox().get_items();

for (var j = 0; j < destinationItems.length; j++) {

var destinationItem = destinationItems[j];

if (item.get_value() == destinationItem.get_value()) {

args.set_cancel(true);

}

Pls help,

Thanks..

ListBox

answered on 04 Sep 2013

1 answer

70 views

RAdgrid column hide Hi guys I have a radgrid column:

h

General Discussions

answered on 03 Sep 2013

2 answers

130 views

Export To Excel Never completes

I have a grid that has the export to excel functionality. When the grid has a small number of records it works, but in some cases I need to be able to export large number of records. One instance is 122,103 records.
I have the MaxRows set for 1048576, so it should fit on one sheet, but when it hits this line of code.
I am using ExportToExcelML.

excelExporter.RunExport(fileName);

It seems to become unresponsive. I have let the application run for up to 10 min with the export never being created.

Also right now I simply change the cursor to a waitcursor during this time, is there anyway to show progress of the export?

Grid

answered on 03 Sep 2013

1 answer

312 views

Add custom attributes to appointments on web service bound Scheduler

Hi,

I am replacing ADO.NET data source of Radscheduler with web service.
On previous one, I had appointment template that used custom attributes inserted on appointment data bound event, how can I add custom attributes to show appointment template with this new databinding environment?

protected void TicketsSchedule_AppointmentDataBound(object sender, SchedulerEventArgs e)
{
.....................
e.Appointment.Attributes["MTaskID"] = row["MasterTaskID"].ToString();
e.Appointment.Attributes["TaskID"] = row["SubTaskID"].ToString();
e.Appointment.Attributes["ProjectID"] = row["ProjectID"].ToString();
.................

<telerik:RadScheduler runat="server" ID="RadScheduler1" OnResourcesPopulating="RadScheduler1_ResourcesPopulating" SelectedView="TimelineView" EnableCustomAttributeEditing="True" OnClientDataBound="onSchedulerDataBound"
OnClientAppointmentsPopulating="OnClientAppointmentsPopulating" Width="1900px" Height="900px" OverflowBehavior="Scroll" OnClientResourcesPopulating="OnClientResourcesPopulating"
AppointmentStyleMode="Default" >
<AppointmentTemplate >
<div>
<div id="ApptImageDiv" style="text-align:right; position:absolute; width:95%;" >
<asp:Image ID="ApptAttachmentImg" runat="server" Width="16px" Height="17px" CssClass="ShowAttachment"

/>
</div>
<%#Eval("Subject") %>
</div>
</AppointmentTemplate >
<DayView UserSelectable="True" GroupBy="TechName" GroupingDirection="Horizontal" />
<WeekView UserSelectable="True" GroupBy="TechName" GroupingDirection="Vertical" />

Any idea?

Thanks,
Prava

Scheduler

answered on 03 Sep 2013