Paste invalid data into RadNumericTextBox

[Phil]

Hi:

I was testing a RadNumericTextBox.  It is somewhat declared as follows:

<telerik:RadNumericTextBox ID="quantityTextBox" Runat="server" MaxLength="4"
    MaxValue="9999" MinValue="1" Text='<%# Bind("Quantity") %>' Width="60px"
    OnTextChanged="quantityTextBox_TextChanged" AutoPostBack="True"
    />

I was testing for XSS (cross site scripting) and was able to paste <scr into the textbox.  I was not able to type the value, but surprisingly, I was able to paste non-numeric data.

Phil

[Kevin]

Hello Phil,

It's true that you can paste the value in, but after the control loses focus, it gets removed. At least that is how it works on the demo site.

[Phil]

Hi:

I have an OnChange event on the text-box and it is processed.  It is not the expected behavior.  Not good.

Phil

[Elliott]

is there an OnError client event?  you can set_value('') at that point