The InsertLink light dialog has a typo in the for attribute of the URL label, causing a case mismatch with the input's id. This results in accessibility tools like Wave and SortSite reporting the URL textbox as an unlabeled control.
Steps to Reproduce
1. Add a RadEditor with EnableAriaSupport="true" to a page
2. Ensure the InsertLink tool is enabled (it is by default)
3. Click the InsertLink toolbar button to open the dialog
4. Run an accessibility audit using Wave, SortSite, or inspect the DOM

Expected Behavior
The label's for attribute should match the input's id attribute exactly, allowing accessibility tools to correctly associate the label with the input.

Actual Behavior
• Label has for="LinkURL" (uppercase "URL")
• Input has id="LinkUrl" (mixed case "Url")
Since HTML for/id matching is case-sensitive, the label is not properly associated with the input control.

Affected File
InsertLink.ascx

## Description
When RadEditor switches to HTML mode, a `<textarea>` with class `reTextArea` is dynamically created. This textarea lacks proper accessibility attributes, causing WCAG accessibility tools (e.g., Wave) to flag it as an unlabeled form control.

## Steps to Reproduce
1. Create a RadEditor with `EnableAriaSupport="true"`
2. Switch to HTML mode
3. Run Wave or similar accessibility checker
4. Observe the textarea is flagged as "missing form label"

## Expected Behavior
When `EnableAriaSupport` is enabled, the HTML mode textarea should have:
- `aria-label` attribute to identify its purpose
- `aria-hidden="true"` when in Design mode (hidden state)

## Fix
Added ARIA attributes in `_getHtmlModeTextarea()` and toggle `aria-hidden` in `_showTextArea()` based on `EnableAriaSupport` setting.

The sizes of the Document Manager & Generate ID buttons in the Hyperlink Manager dialog in Lightweight don't look correct - maybe they should be the same height as the textbox?

https://demos.telerik.com/aspnet-ajax/editor/examples/rendermodes/defaultcs.aspx?skin=Bootstrap

Problem
When using RadEditor with Track Changes and Comments features enabled and a non-English language setting (e.g., Language="pt-BR"), the confirmation and result dialog titles for bulk operations display mixed language content.

Affected dialogs:

• Remove All Changes
• Remove All Comments
• Accept All Changes
• Reject All Changes

Example of incorrect behavior:

• Expected title: "Remover Todas as Alterações" (Portuguese)
  
• Actual title: "Remover Comentário All Changes" (mixed Portuguese + English)

Steps to Reproduce

1. Configure RadEditor with EnableTrackChanges="true" and EnableComments="true"
2. Set Language="pt-BR" (or any non-English language)
3. Add some track changes or comments to the content
4. Click on "Remove All Comments" or use any bulk track changes operation
5. Confirm the action by clicking OK
6. Observe the dialog title in the result alert
   
   

Steps to reproduce:

1. Enable the PdfExportFilter filter
2. Open the page with RadEditor in the browser
3. Insert a table element
4. Select the Table in the Node Inspector and apply a width of 500px
5. Switch to HTML mode and you'll notice that the width attribute/inline style has gone

Dear support,

we've recently updated to the Telerik version 2025.4.1210.462 and are experiencing issues with the (relatively) new RadEditor filter EditorFilters.StripCssExpressions. In particular, setting the RadEditor.Content and rendering the RadEditor object drastically tanks performance in certain situations.

We're aware of the web.config setting to increase the Telerik.RegexMatchTimeout, but for a 79KiB content to be rendered basically instantaneously with the previously mentioned filter being explicitly disabled to take 23+ seconds to render if the filter is enabled is quite shocking to me.

Please find a simple sample page (including the content-value) attached.

We'd really like to use the new security features of the RadEditor, but given this performance impact, we'll be unable to ship this feature as-is.

(Off-topic: We're currently evaluating to re-enable the EditorFilters.StripJavaScriptUris which removed our base64-encoded images in the November release of Telerik, but got fixed with the December release.)

Thanks in advance for investigating this issue and I'll be awaiting your feedback.

Kind regards

Hi, 

We need to add an aria-label attribute to the RadEditor toolbar link buttons to match the title attribute text. I have been successful using JQuery on other controls to improve accessibility, but this one is not working. It appears because the link button is not rendered since is a pseudo element using the ::before. I have been unable to inject the attribute on page load. 

The issue is for screen readers the editor buttons are not announced when using the arrow key navigation which is called virtual mode. The buttons do announce when using the tab key which is called forms mode.

If this can be a bug fix it would benefit everyone, otherwise, if you have a code suggestions that is helpful. Image attached. 

Thank you.

The newly introduced StripJavaScriptUris security filter is incorrectly identifying and removing legitimate base64-encoded image data URIs (e.g., data:image/png;base64,...) from RadEditor content. The filter treats these safe image URIs as potential XSS threats and strips them along with dangerous JavaScript URIs.

1. In Design mode, select all text (Ctrl + A) and delete it.
2. Switch to HTML mode.
3. Switch back to Design mode.
4. Press Ctrl + Z (Undo).

• The first Ctrl + Z has no effect; the deleted text is restored only after pressing Ctrl + Z a second time.

Steps to Reproduce

1. Open a page containing RadEditor with some content in it
2. In Design mode, select all text (Ctrl+A)
3. Delete the selected text
4. Switch to HTML mode
5. Switch back to Design mode
6. Press Ctrl+Z (Undo) a couple of times.
   

Current Result

• A JavaScript error is thrown in the browser console
• The undo operation fails to restore the deleted content
• Error occurs in _updateBrowserRangeStart method when calling this.range.setStart(e, t)

Expected Result

• The undo operation should work without errors
• The previously deleted text should be restored
• No JavaScript errors should appear in the console

When using RadEditor with the StripDomEventAttributes content filter enabled, script execution can still occur when switching from HTML to Design mode.

Certain HTML and SVG elements containing attributes such as onload, onclick, or href/to values that start with javascript: are not fully sanitized before the editor’s content is rendered in Design view. As a result, embedded script code can run during the mode transition even though the anti-script filter is active.

Reproduction steps:

Add a RadEditor with the default filters:

<telerik:RadEditor runat="server" ID="RadEditor1"
    ContentFilters="DefaultFilters,StripDomEventAttributes">
</telerik:RadEditor>

1. Load the page.
2. Switch the editor to HTML mode.
3. Paste any of the following samples (look below)
4. Switch to Design view
5. Watch alerts

<svg/onload=alert(1)><svg>
<svg
onload=alert(1)><svg> # newline char
<svg	onload=alert(1)><svg> # tab char
<svgonload=alert(1)><svg> # new page char (0xc)

 

 

 

From the widget/page > select the middle bottom cell (notice it has no styling) > Table properties > Cell Properties > Select the middle bottom cell again > More Cell Styling > Border > Notice that the top row design is inherited > Is this expected? 

 video link:- https://jam.dev/c/1516e16f-1f7c-4e89-8b19-368edabf5703 

I have observed that when we're in the widget > selecting a cell from the table > clicking on Cell Properties > The top row design is not inherited. 

Following  the bug report Cell Properties - Preview only shows top-left cell styling when applying changes to multiple top-row cells > when we navigate the mouse up and down, in the background, we can see only the top left cell with the border we configured. (while initially we selected the top three) > But if now, in the preview page, we will choose the top three > OK >We will see the top three cells showing the design we configured. 

video link:- https://jam.dev/c/ba52bff1-7459-44d6-a647-d3eb5cea07f3. 

Table properties > Select cells (e.g the top three) > Border > Select the bottom > 6 PX > Purple > OK > The preview is not showing the changes we want to apply > the preview is showing only the top left cell

video link:- https://jam.dev/c/88c17904-c758-47ab-949c-d29b4775dc6d 

When we edit the widget > click on the table on a random cell > select Table Properties > The table wizard will always default to the top left cell > This is working as expected.
If you click in the table (not the editor) and select Cell Properties > the wizard will display (highlight) the cell you selected in the table is it expected that when selecting table properties it always default to the left side first box but when selecting cell properties it will show the current cell which we are in.

video link:- https://jam.dev/c/c1cdf56c-53ab-4218-8774-65907b3efd6d 

When loading RadEditor (Telerik UI for ASP.NET AJAX 2025 Q2) in Internet Explorer 10/11 or Edge in IE Compatibility Mode, the editor does not render and JavaScript errors occur immediately upon page load.

SCRIPT1002: Syntax error
SCRIPT5022: Sys.ArgumentUndefinedException: Value cannot be undefined. Parameter name: type

Hi,

We are using Material Theme in our application. We see the problem in Rad Editor's Ribbon. Some icons are overlapping the Text. In the demo, it seems to be same behavior.

Regards,
Jamil

In the demo:
https://demos.telerik.com/aspnet-ajax/editor/examples/trackchanges/defaultcs.aspx

 

1. (Preparation) Disable TrackChange and Remove all text. Enable Track Change back.

2. Insert table, (HTML View)

3. In the design mode set new paragraph after table:

 

Insertion of the table dissapeared.

How to fix this issue?

Hi 

I have a RadEditor control where some toolbar functionalities are not working.

After searching for a possible reason, I used the OnClientCommandExecuting client-side event and noticed that sometimes, instead of the args with its value, I found the item of a RadTreeList control present on the page.

I tried to reproduce the issue by inserting an Editor and a TreeList on a page. I write some text in the Editor and try to change the color or background. Not always (and I can't figure out when), but sometimes the args are incorrect.

For example, if I open a node of the tree, the error is almost certain after that.

I send you an image of my javascript debugger.

I don't know what I can do, do you have any ideas?

Thanks

Michela