Hi
We have been using a form action to logout within our TelerikMenu:
<TelerikMenu Data="@MenuItems">
<ItemTemplate Context="item">
@{
if (item.IsForm)
{
<form method="post" action="@item. Action">
<AntiforgeryToken />
<input type="hidden" name="ReturnUrl" value="/" />
<input type="submit" value="@item. Text"/>
</form>
}
else
{
<NavLink href="@item.Url">
<span>@item.Text</span>
</NavLink>
}
}
</ItemTemplate>
</TelerikMenu>
But we are now struggling with the new `<AntiforgeryToken />`. It does not seem to be able to render itself. I don't know if it has anything to do with the way it constructs itself:
private void RenderField(RenderTreeBuilder builder)
{
builder.OpenElement(0, "input");
builder.AddAttribute(1, "type", "hidden");
builder.AddAttribute(2, "name", _requestToken!.FormFieldName);
builder.AddAttribute(3, "value", _requestToken.Value);
builder.CloseElement();
}
We have managed to create a work around by basically copying the AntiforgeryToken logic into our own component i.e.:
@inject AntiforgeryStateProvider antiforgeryStateProvider
<input type="hidden" name="@_requestToken!.FormFieldName"value="@_requestToken.Value" />
@code {
private AntiforgeryRequestToken? _requestToken;
??? (){
_requestToken = antiforgeryStateProvider?.GetAntiforgeryToken();
}
}
But this means that we would have to maintain that extra code and take on the responsibility of the security it provides. Is TelerikMenu the wrong component for this or is there any better way to get this working?
Thanks,
Mark
Can you confirm that Telerik UI for Blazor (3.7.0 Published Wednesday, November 9, 2022) is not using Microsoft System.Data.Common in such a way that it would expose the following risk to our system. Either way, can you confirm that upgrading to Telerik UI for Blazor V 5 would mitigate this? Thanks.
"CVE-2020-1147 is a remote code execution vulnerability that exists in .NET Framework, Microsoft SharePoint, and Visual Studio. This vulnerability can be exploited when the software fails to check the source markup of XML file input. An attacker who successfully exploits this vulnerability could run arbitrary code in the context of the process responsible for deserialization of the XML content.
In the context of Telerik, it’s important to note that the Telerik UI for ASP.NET AJAX builds before R1 2020 (2020.1.114) are vulnerable to this exploit. This vulnerability was exploited by multiple cyber threat actors, including an advanced persistent threat (APT) actor, in a .NET deserialization vulnerability (CVE-2019-18935) in Progress Telerik UI for ASP.NET AJAX, located in a federal civilian executive branch (FCEB) agency’s Microsoft Internet Information Services (IIS) web server."
I've hardcoded every column's width, still when the grid loads it'll span to the whole page's width. I expand the browser window, the grid grows with it.
When I manually resize one of the column, the grid starts behaving like expected and stops growing with the window but it'll keep the arbitrary column sizes from start up (the the ones I coded).
The only way I could get out of this was to set the width of the grid itself. But now if I expend a column manually, I'm getting a scrollbar because the width is limited.
At render the grid is enclosed in div with "k-grid k-widget telerik-blazor" class. I tried messing with those a little with no avail.
I need the grid to appear as an inline block, with a total width that amounts to the sum of the columns widths I hardcoded....
Any help appreciated.
Thanks
I want to use the VisibleChanged-Event but it is only firing, if the User closes the Window through "CloseOnOverlayClick"
A click on an Action-Button or setting the isVisible-Property to false does not work.
Here is my Code:
<TelerikWindow Class="window-dialog" Centered="true" Visible="@isVisible" VisibleChanged="@VisibleChangedHandler" Modal="true" CloseOnOverlayClick="true">
<WindowTitle>
<strong>Log-In</strong>
</WindowTitle>
<WindowActions>
<WindowAction Name="Close" OnClick="@(()=>isVisible=false)" />
</WindowActions>
...
I have seen the example of using a custom CSS style to modify the appearance of the TelerikWindow action buttons (border / background / color).
Is it possible to change the location of the action buttons to be at the bottom of the window (preferably just the buttons, and not the whole title bar)?
Hello,
I have a grid with InLine editing. The first column in the grid is a dropdownlist. The second column has a switch statement that will show a different control based on the selected value of the dropdown. I have an OnChange() method on the dropdown and I call StateHasChanged() in that method, but the switch statement never gets called.
How can I get the second column in the grid change based on the first column changing?
Thanks,
Dave
I´m trying to export a page as PDF in a Blazor application.
I found this example application that uses the kendo-drawing api with JS interop.
https://github.com/telerik/blazor-ui/tree/master/common/pdf-jpg-export-js
This works fine as long as you do not use a template. The template API is missing entierly.
I have for now copied over the entier kendo libs folder from a project that uses kendo MVC. It works, but I would rather just use the kendo-drawing api and not everything.
Is the kendo templating stuff available somewhere separately?
(NOTE: This is not an accessibility question but there is no tag that fits as far as I can tell and I cannot define a new one)
Hello, could you help me please. I have a problem with calling razor page (blazor) in HTML, sometime is work sometime isnt.
I try call only https://xzy.intra.cz/aktpoh/233 and press F5 and it was still working.
But if I call it in iframe or embed or object i.e.
<tr>
<td>X group</td>
<td><iframe href="https://xzy.intra.cz/aktpoh/233" height="50" type="text/html" width="300"></iframe></td>
</tr>
<tr>
<td>Y group</td>
<td><embed src="https://xzy.intra.cz/aktpoh/30" height="50" type="text/html" width="300"></embed></td>
</tr>
<tr>
<td>Z group</td>
<td><object data="https://xzy.intra.cz/aktpoh/243" height="50" type="text/html" width="300"></object></td>
</tr>
<tr>
sometime work but if I press F5 for refresh sometime isnt work.
How can I call it
Peter
Greetings Forum Members,
I trust you're all doing well. I'm currently involved in a project at my company, where we are contemplating migrating an existing ASP.NET project (built with the old aspx and vb.net) to the newer ASP.NET Core. Our consideration involves using the Telerik code converter to transition the code from vb.net to c#.
I'm reaching out to the community to gather insights on whether the Telerik code converter takes into account libraries during the conversion process. If any of you have experience with this tool or similar migration scenarios, your guidance would be immensely valuable.
Thank you for your time and assistance. Looking forward to your knowledgeable responses.
Best regards,
EHallPass