Hello everyone,
I have a problem with the RadScheduler.
When I try to update an item, if a text field (title, location, description, ...) contains the character "<", it makes nothing.
The loading that often lasts more than 1 second lasts 0.1 sec, and nothing happens...
Is this bug known ?
Is there a fix ? A solution ?
Thanks a lot
I have a problem with the RadScheduler.
When I try to update an item, if a text field (title, location, description, ...) contains the character "<", it makes nothing.
The loading that often lasts more than 1 second lasts 0.1 sec, and nothing happens...
Is this bug known ?
Is there a fix ? A solution ?
Thanks a lot
1 Answer, 1 is accepted
0
Hi Nerk,
Yes, this is expected. The following exception will be thrown when trying to insert text starting with an opening tag - '<'
A potentially dangerous Request.Form value was detected from the client (RadScheduler1_Form_Subject_text="<sd").
Description: Request Validation has detected a potentially dangerous client input value, and processing of the request has been aborted. This value may indicate an attempt to compromise the security of your application, such as a cross-site scripting attack. To allow pages to override application request validation settings, set the requestValidationMode attribute in the httpRuntime configuration section to requestValidationMode="2.0". Example: <httpRuntime requestValidationMode="2.0" />. After setting this value, you can then disable request validation by setting validateRequest="false" in the Page directive or in the <pages> configuration section. However, it is strongly recommended that your application explicitly check all inputs in this case. For more information, see http://go.microsoft.com/fwlink/?LinkId=153133.
Greetings,
Peter
the Telerik team
Do you want to have your say when we set our development plans? Do you want to know when a feature you care about is added or when a bug fixed? Explore the Telerik Public Issue Tracking system and vote to affect the priority of the items.
Yes, this is expected. The following exception will be thrown when trying to insert text starting with an opening tag - '<'
A potentially dangerous Request.Form value was detected from the client (RadScheduler1_Form_Subject_text="<sd").
Description: Request Validation has detected a potentially dangerous client input value, and processing of the request has been aborted. This value may indicate an attempt to compromise the security of your application, such as a cross-site scripting attack. To allow pages to override application request validation settings, set the requestValidationMode attribute in the httpRuntime configuration section to requestValidationMode="2.0". Example: <httpRuntime requestValidationMode="2.0" />. After setting this value, you can then disable request validation by setting validateRequest="false" in the Page directive or in the <pages> configuration section. However, it is strongly recommended that your application explicitly check all inputs in this case. For more information, see http://go.microsoft.com/fwlink/?LinkId=153133.
Greetings,
Peter
the Telerik team
Do you want to have your say when we set our development plans? Do you want to know when a feature you care about is added or when a bug fixed? Explore the Telerik Public Issue Tracking system and vote to affect the priority of the items.