Rad controls with Https broken?

[Ray]

Your controls suffer from the well known issue with about:blank and https and IE..
I.e you need to STOP generating about:blank as this will cause IE to display mixed content popups with https..
This happens on RadMenu, which have been testing, but suspect is a general defect..

Search of google will show you how to fix..

[Todd Anglin]

Ray-

I believe the RadControls (including RadMenu) are fully compatible with HTTPS environments. I have used most of the RadControls in many SSL secured websites without problems or mixed security mode messages. Can you provide a link to an example where this problem is demonstrated? If you'd like I can provide you with a link to a demo on an SSL site that has RadMenu and is working fine.

Sorry for the confusion. Let me know if I can provide any additional help.

-Todd

[Ray]

Your controls are using two javascript no..no's ( use google to see why you cannot use these)..
Radmenu has the about:blank issue,and we have found Radeditor uses javascript:void(0) both WILL BREAK SSL..
The conditions under which they break will depend on the browser version, and cleint setup but YOU MUST REMOVE these from your code use the traditional blank.html solution that everyone elese uses..
i.e common problem common solution..
This is not a subject for debate about the above usage, it just needs to be fixed..

But as nothing actually gets fixed here, once we have completed our evaluation, we will simply fix the problems ourselves using the source code option.. It will be a lot quicker than these threads..

[Todd Anglin]

Sorry you feel that way, Ray. Generally, I think the forums are very good helping people find answers to common problems. If you do encounter bugs, the best way to communicate those and get them addressed in a future SP is to use the Support Ticket system. We generally very good about following-up on bugs and ensuring they are either A) fixed right away in a hotfix build, or B) fixed in a larger Service Pack or Q release. If you have not done so already for this problem, I'd suggest you open a suport ticket so this can be officially logged.

That said, I have to come back to my point that RadMenu and RadEditor do not break SSL when used correctly. I have successfully used both controls in real-world SSL scenarios without issue in IE, FF, or Safari (as have many of our partners). That doesn't mean your issues aren't valid; it just means that you can use the RadControls in SSL successfully today.

For those curious, here are some articles talking about Ray's suggestions:

http://blog.outofhanwell.com/2006/06/27/using-windowonload-over-https/

http://www.milonic.com/mfa/2005-October/the-script-tries-to-load-blankhtml-gt-ssl-warnings-on-i.html

Thanks for the feedback, Ray. Hopefully we can address these scenarios, soon.

-Todd

[Ray]

"suggest you open a suport ticket so this can be officially logged."
Make up your mind!! I have an open ticket, you say to use the forum, now you say to use the ticket system!!

Here is just one of the many example of your breaking code.. this was taken from a source view of your radeditor..
"

id="Body_ModesWrapper">

 

 

 

• class="reMode_design reMode_selected">Design

• href="javascript:void(0);" title="HTML"

  class="reMode_html">HTML

• href="javascript:void(0);" title="Preview"

  class="reMode_preview">Preview

Mmm, you say you dont generate ssl breaking code ...what rubbish!!
please see href="javascript:void(0);"  the same goes for your menu and about:blank!..

Just fix the problem...

[Ray]

http://gemal.dk/blog/2005/01/27/iframe_without_src_attribute_on_https_in_internet_explorer/

[Todd Anglin]

Hello again Ray-

As I mentioned in your other thread, I apologize for the support ticket confusion. Clearly, if you have a support ticket open, you don't need to open another. I'll ask the support team to re-address your ticket so you get an answer.

To the issue at hand, it's funny that in real SSL sites I've never hit these security errors with the RadControls. I'm not just making "rubbish" statements. :) That said, I agree with your observation- the RadControls do render a syntax that seems to affect only old versions of IE6. In the forum post you linked to, you'll note in the comments that people are reporting the javascript:void(0) syntax works in IE6 SP2+. So it seems the error is related to very specific versions of IE.

That said, we definitely need to address the issue- one way or the other- so watch for a resolution to your ticket soon. Thanks again for actively trying to help make the RadControls better. The community definitely benefits from your contirbutions.

-Todd

[Ray]

" I'm not just making "rubbish" statements. "

the statement refers to your claim that you comply with the requiremenst of not generating about:blank and javascript... ect errors..
As shown this is a false statement, as the controls do generate breaking code as per the example..
I will not comment on what your experience using ssl site is.. as it is not relevant...the probem exists, the code is broken...

"that seems to affect only old versions of IE6"
Wrong this affects all versions of IE in various forms ( our experiecne is from IE5 onwards), the only solution is to fix the problem as per the referenced link or any google thread..

The "always" works solution is blank.html all other will have some issues, have not seem the ".' type solution but suspect it will aslo fail under some cleint settings..

"That said, we definitely need to address the issue"
Great, as mentioned this is just one of the very basic issues with Rad controls, these things are very well known,a nd have been fixed in every control we have used for the last 5 years.. Yours is the first we have seen that does not get this basis stuff..
That said, there are some realy nice aspects of RadControls, if theis very basis stuff is fixed in Q2 2009 we will consider moving to RAd Controls, but at the moment there are too many breaking basic errors..

That being said, all of these have well known fixes and would only take a couple of hours to modify the source to fix..

In fact the time I have spent with tickets and forums on this issue, is actually longer than it would take to fix the probem...

[Yeroon]

Well at least Ray we can say you are a not a very friendly person. Your way of commenting doesn't help us. Learn how to properly converse with people and you might get an answer sooner. Seems to me you have no social skills of any kind.

Thank you Todd for being patient and giving some suggestions to solve this.

[Nabanita]

Hello,

I have used rad drop down in the following link
https://v2wcommunications.com/estore2/ClassicCheckOutStep1.aspx?plan=8&ptype=res

When I am trying to open the page in IE it shows me the error (attached file)
If I click 'yes' rad is not working.

Please help me on this.

Thanks in advance.

[Cat Cheshire]

The page throws an error:
Error: ASP.NET Ajax client-side framework failed to load.