Subresource Integrity is a fairly new security scheme for protecting against malicious script obtained from third-party source (CDNs). It requires that the script tag include a hash of the script content so the browser can verify that it has not been altered. Telerik controls generate a bunch of script tags for cloudfront.net. It would be swell if the script tags would include the extra attributes necessary to implement subresource integrity. Is this in the roadmap? Mozilla provides a security analysis tool which highlights this issue. Look at the results for telerik.com here -> https://observatory.mozilla.org/analyze/www.telerik.com. More info available on https://infosec.mozilla.org/guidelines/web_security#subresource-integrity https://www.w3.org/TR/SRI/
<telerik:RadScriptManager ID="RadScriptManager1" runat="server">
<Scripts>
<telerik:RadScriptReference Path="https://code.jquery.com/jquery-3.7.1.js" integrity="sha384-NdBrHQkGhjPzZhn" crossorigin="anonymous" />
<telerik:RadScriptReference Path="https://code.jquery.com/jquery-3.2.1.slim.min.js" integrity="sha384-KJ3o2DKtIkvYIK3UENzmM7KCkRr/rE9/Qpg6aAZGJwFDMVNA/GpGFF93hXpG5KkN" crossorigin="anonymous" />
</Scripts>
</telerik:RadScriptManager>
The menu commands for Telerik projects sometimes are not visible. The reason why is that the visibility state of the commands is evaluated asynchronously. Depending on the time it takes to evaluate the command state, sometimes the commands are not available when they are queried for the first time.
NOTE: It can be observed in all Telerik products.
Due to recent changes to the keyboard accessibility of the RadMenu (i.e. it is now only accessible using the arrow keys instead of moving around using tabs), mega menus are no longer keyboard accessible. We have designed a mega menu using a telerik RadSiteMap embedded in a RadMenu control, as suggested in the Telerik Demo site: http://demos.telerik.com/aspnet-ajax/menu/examples/megadropdown/defaultcs.aspx However, this is no longer accessible. Previously, you could open the dropdown by pressing the down button, then move around in the dropdown using tab. Now, however, pressing tab just closes the dropdown. We need the menu to be accessible in one way or another.
Hello,
I'm unsure whether this is an actual bug, but I can't seem to clear the selected text in the RadDropDownTree when i use UncheckAllNodes or UnselectAllNodes from the server side.
I try to to set SelectedText and SelectedValue on the RadDropDownTree control to string.Empty but neither works.
The nodes are unchecked though, but the text showing the previous selection is still visible after i reload the page.
What should I do to also set the text to represent the selection done by UncheckAllNodes?
Kind regards,
Anders
Hello Team,
In Editor, proportional resize of image (by holding Shift and dragging) is not working unlike in Word.
Could you please suggestion for adding the same in Editor.
Thanks.
When the grid has a horizontal scroll bar displayed, we can't scroll the table horizontally using keyboard only. If testing using the Siteimprove Accessibility Checker, we will get the issue "Scrollable element is not keyboard accessible".
The reason is that when the RadGrid is rendered, the horizontal scroll bar is render as a separate <div> out of the data table, and the horizontal scroll bar doesn’t have a tabindex, so there’s no way to put focus on it using keyboard. Can you add tabindex="0" to the horizontal scroll bar?
Due to wrong project type detection, most of the menu and context menu commands are not available for web application projects.
The following commands are missing:
- Configure project
- Add [DPL] references
- Add Telerik Scenario...
- More Scenarios...
- the commands for individual scenarios
- the project context menu
The following commands are available but are not expected to be available:
- Create New Telerik Project
The contrast between the colors for the background and the text in the Tooltip of the Chart series is very low (dark background and black text). https://www.screencast.com/t/fhx6937j The problem is most obvious in the Outlook, Simple, Web20 and Sunset skins. Workaround would be setting the Color property for the ToolTipAppearance to White
In case where the y-axis minimum value < 0 the x-axis label appears below the y=0 line and not below the chat. I am however able move the x-axis label to be below the chart by setting RadHTMLChart.PlotArea.YAxis.AxisCrossingValue = the minimum value on the y-axis.
However the y=0 line on the chart is no longer prominent on the chart. I was advised to use a jQuery-type solution to move the label without affecting the appearance of the y=0 line on the chart:
<telerik:RadScriptManager ID="RadScriptManager1" runat="server"></telerik:RadScriptManager>
<script>
function kendoChartInitializing(sender, args) {
//move just the Title of the axis
args.xAxis.title.padding = { top: 80 }
}
</script>
Please provide a code-behind or design time feature to set this property instead of resorting to a jQuery-type method.
Instead of using jQuery-type script (kendo?), please provide functionality to the RadHTMLChart to specify label properties of a RadHTMLChart series. For example (background colour, padding and border)
<telerik:RadScriptManager ID="RadScriptManager1" runat="server"></telerik:RadScriptManager>
<script>
function kendoChartInitializing(sender, args) {
var series = args.series;
for (var i = 0; i < series.length; i++) {
series[i].labels.background = "white";
series[i].labels.padding = 4;
series[i].labels.border = { width: 1, dashType: "solid", color: "black" }
}
}
</script>
Instead of using jQuery-type script (kendo?), please provide functionality to the RadHTMLChart to specify MinSize and MaxSize properties of the RadHTMLChart.
Instead of the following:
<telerik:RadScriptManager ID="RadScriptManager1" runat="server"></telerik:RadScriptManager>
<script>
function kendoChartInitializing(sender, args) {
var series = args.series;
for (var i = 0; i < series.length; i++) {
series[i].maxSize = 30;
series[i].minSize = 10;
}
}
</script>
Recently, Chrome version has been updated our all the user’s system as 117.xxx.xxx.
After updating the Chrome version and RadAsyncUpload is not working and getting the below error message. So, user unable to perform any upload action on this.
This is control using in production live application and it affecting our day-to day business.
Please provide your solution as soon as possible.
Error – Message :
Uncaught Error while uploading, <div></div><pre>{"fileInfo":{"FileName":"README.md","ContentType":null,"ContentLength":5798,"DateJson":null,"Index":0}, "metaData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}</pre>
There are issues with the cursor location when clicking at the end (or to the right) of a line in bullet lists with multiple levels.
When clicking at the end of the line the cursor is unexpectedly placed at the beginning of the line instead of at the end.
This does not happen if you click on some of the actual text or hit the exact location of the last character of the line, but when you naturally click just to the right of the end of the line.
It seems that it does not happen on all levels, but only some, as I have tried to depict in the attached screenshot.
This behavior was replicated on the latest WebForms Editor demo at https://demos.telerik.com/aspnet-ajax/editor/examples/overview/defaultcs.aspx