Kashif Imran
Top achievements
Rank 1
Rank 1
Kashif Imran
asked on 15 May 2009, 12:41 AM
Does RadEditor has any builtin option to help avoiding xss etc.
I tried two code blocks below. one with javascript and other with iframe.
<script type="text/javascript">
alert("HI");
</script>
<iframe src=http://www.google.com height="200" width="200"/>
javascript did not get executed but I got iframe in the page. Normally I would do HtmlEncode and HtmlDecore. But If I need to keep tags like bold , italic etc, how can I do that?
I tried two code blocks below. one with javascript and other with iframe.
<script type="text/javascript">
alert("HI");
</script>
<iframe src=http://www.google.com height="200" width="200"/>
javascript did not get executed but I got iframe in the page. Normally I would do HtmlEncode and HtmlDecore. But If I need to keep tags like bold , italic etc, how can I do that?
1 Answer, 1 is accepted
0
Hi Kashif,
The safest way is to modify the iframe tag on the server. The content outputted via the editor's server property is a string and you can modify it using the RadEditor1.Content.Replace() method.
Kind regards,
Rumen
the Telerik team
Instantly find answers to your questions on the new Telerik Support Portal.
Check out the tips for optimizing your support resource searches.
The safest way is to modify the iframe tag on the server. The content outputted via the editor's server property is a string and you can modify it using the RadEditor1.Content.Replace() method.
Kind regards,
Rumen
the Telerik team
Instantly find answers to your questions on the new Telerik Support Portal.
Check out the tips for optimizing your support resource searches.