Quantcast
Channel: AjaxControlToolkit Work Item Rss Feed
Viewing all articles
Browse latest Browse all 4356

Closed Unassigned: sanitizer needs improvement [27871]

$
0
0
The sanitizer that goes with the htmlextender is supposed to remove dangerous html that could cause "cross-site-scripting (XSS).
I find that when I copy and paste portions of webpages from wikipedia into an htmlextender that has "enablesanitization" set to TRUE, I get some glitches.
For instance, hyperlinks are not removed, (which would be good), and they are not left intact either. Instead, they are htmlencoded so you see something like A HREF="mypage.htm" in the text of the pasted code.
Ideally, you should be able to set a few parameters in the sanitization process. One of them might say: "just get rid of hyperlinks, I don't want my user to see any trace of them, not even encoded.".
Comments: This is a good suggestion. We will take it into account while working on the toolkit. Thank you!

Viewing all articles
Browse latest Browse all 4356

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>