I have been doing a static code analysis of my entire project with the KIUWAN tool

This tool has found some security issues in some Kendo JS files

I would like to know if they are false positives or if it can be justified in some way that there are no security problems

Problems found (the most important are the first 3):

• Do not update control vars in 'for' loop body Maintainability Control flow
• Potential denial-of-service attack through malicious regular expression(ReDoS)
• Never use JavaScript 'history' object or navigation-based positioning
• Avoid unused local variable 
• Avoid accessing unreliable variable properties 
• Standard pseudo-random number generators cannot withstand cryptographic attacks
  
  The details of the analysis are in the attached file (a zip with a pdf file)

Kendo version: 2020.2.513

Hi, we need to use the setOptions function when we resize the window, to set the new gantt height.

We also use the "resizable" property.

The problem is, after a "column resize", the inner "option" column width is not set to the object.

So, when we use setOptions, the columns size are back to original.

We found a workaround, where we edit the inner option column size property after a "colunnResize" event, but I think that it's a bug and it should be done by the component itself automatically.

https://dojo.telerik.com/@foxontherock/uCulUjiy/6

I also tried to keep the "listWidth" by binding the "resize" event of the inner splitbar, but I think it's not a kendo splitter, but a custom spliter made just for the gantt, and it doesn't work.

We’re using the Kendo Grid and need to  make it  ADA compliant . We're using a tool called JAWS for verifying the ADA compliance.
Below are some of the issues we noticed:

1) How can we set focus on the Edit popup screen from kendo grid?

2) Say once the focus is set on Edit popup form ;How can we navigate to the other controls on the popup screen ?

3) How can we exit out of the edit popup screen and set focus back to the main grid ?  

Thanks,

Prasuna

Hi ,

We are working on the requirement in which we need to provide more options/bullets for ordered list or for unordered list like we have multiple options in MS word.

Also i find same think in richtext editor https://richtexteditor.com/ where we can have such options in the form of dropdown list, Is it possible with Kendo Editor as we have license for Kendo ?

Thanks,

AK

Hi devs and support.

I'm using the grid search panel in a grid toolbar template (https://www.telerik.com/forums/search-panel-and-toolbar-template)

If the user paste "1234 " (with a trailing space) into the search input box the row with id="1234" is not found.

Is there a clever way to do a .trim() before the entered/pasted value is used to search the data?

Best regards

Morten

Is there a way to turn off the tools menu in the editor through javascript.  I want to remove the tools when the control is disabled and then make them show when it's enabled.

Hi, we need to hide the timeMarker.

So we use the setting, "currentTimeMarker: false".

It works on the initial rendering, but it gets back on multiple events, like resize.

Example: (will reappear after 1000 ms by calling kendo.resize)

https://dojo.telerik.com/@foxontherock/iSEquBeT

I have a kendo combobox to determine what data is being called in the sql backend. The rows from the sql table are added to a table element below the combobox and one of those elements is a button that saves the data when edited. For some reason when i change to another client at times it will call the button event to save an item in the table but apply it to the next combobox value and leads to data being copied from one client to the other. Not sure how to being fixing this issue but I have isolated it to the change event via loggers.

here is some code : 

<form id="form1" runat="server" autocomplete="none"> <div id ="lineitemeditdiv" runat="server" style="padding:1%;"> Companies : <select id="clientbillingcompanies" runat="server"></select><br/> <script> window.onload = function() { //$('#clientbillingcompanies').chosen({change: onChangeKB}); $('#clientbillingcompanies').kendoComboBox(); $("#clientbillingcompanies").parent().css('width',"50%"); $("#clientbillingcompanies").data('kendoComboBox').input.attr('autocomplete','off'); $("#clientbillingcompanies").data('kendoComboBox').bind("change", onChangeKB) }; </script> <table id="lineitemtable" runat="server" > </table> <br /> <button id="submitlineitem" >Add</button> </div> </form>

In my diagram I have an event handler on the 'select'; so once a selection of 1 or more shapes is selected then the function fires and the args.selection is stored in a variable. As what is stated is that the args.selection is an array of shapes and/or connections.

I then have a javascript function that gets called when a button is clicked and the following javascript code is run....

            function arrangeH(item) {
                if (selection === null || selection.length === 1) { return true; }
                var diagram = $("#diagram").data("kendoDiagram");
                for (var i = 0; i < selection.length; i++) {
                    var shapeId = selection[i].id;
                    if (selection[i] instanceof kendo.dataviz.diagram.Shape) {
                        var posX = selection[i]._bounds.x; posX = Math.round(posX);
                        var posY = item._bounds.y; posY = Math.round(posY);
                        console.log('recorded position for: ' + shapeId);
                        $.ajax({
                            type: "POST", url: "ReportOutMap.aspx/saveMapPos", data: "{p1:'" + posX + "',p2:'" + posY + "',p3:'" + encodeURIComponent(shapeId) + "',p4:'false'}", contentType: "application/json; charset=utf-8", dataType: "json", sync: "false"
                        }).done(function (values) {
                            console.log('saved position for: ' + shapeId);
                            selection[i].position(new kendo.dataviz.diagram.Point(posX, posY));
                        }).fail(function (xhr, textstatus) { console.log('failed to save position for: ' + shapeId); });
                    }
                }
            }

The purpose of this function is to place all the shapes on the same Y axis point as the shape passed to the function. However, when this is run the new position is stored in the database BUT the actual visual position of the shape does not move. When I look at the browser console log pane, there is a javascript error stating the following...

Uncaught TypeError: Cannot read property 'position' of undefined
    at Object.<anonymous> (ReportOutMap.aspx:876)
    at i (jquery.min.js?v=1:2)
    at Object.fireWith [as resolveWith] (jquery.min.js?v=1:2)
    at y (jquery.min.js?v=1:4)
    at XMLHttpRequest.c (jquery.min.js?v=1:4)

I feel like I am missing something, but the selection[i] has been identified as a shape?