The script tags should contain "defer" attribute. Resolution: You can set the LoadScriptsBeforeUI property of the script manager to false so that the scripts will render as late in the page as possible (just above the inline <script> that MS AJAX generates for the $create() statements). This will provide benefit nearly identical to the defer feature, but it does not risk breaking existing functionality. More information on the property: https://msdn.microsoft.com/en-us/library/system.web.ui.scriptmanager.loadscriptsbeforeui(v=vs.110).aspx
Subresource Integrity is a fairly new security scheme for protecting against malicious script obtained from third-party source (CDNs). It requires that the script tag include a hash of the script content so the browser can verify that it has not been altered. Telerik controls generate a bunch of script tags for cloudfront.net. It would be swell if the script tags would include the extra attributes necessary to implement subresource integrity. Is this in the roadmap? Mozilla provides a security analysis tool which highlights this issue. Look at the results for telerik.com here -> https://observatory.mozilla.org/analyze/www.telerik.com. More info available on https://infosec.mozilla.org/guidelines/web_security#subresource-integrity https://www.w3.org/TR/SRI/
I hate the stupid asp script managers...they're so ghetto with the .axd files always hosing our yslow\pagespeed scores, etc. Since your focus is no on css3\html5\lightweight rendering can you guys not come up a better way to bundle your scripts such that they render properly cached to the footer...maybe take a dependancy for that on system.web.optimization or something? ...maybe some sort of requireJS integration or...? Please feel free to think out of the box instead of being stuck into the asp.net crapballs bloat framework.
Hi all, when I update IIS, I get the following error on each page with Telerik. When I click F5 (refresh), the page loads well and dont appear anymore. I'm using Win 2003 and Win 2008 with IIS. System.OverflowException: Arithmetic, casting or conversion operation overflowed or underflowed. (Exception from HRESULT: 0x80131516) at System.Reflection.PseudoCustomAttribute._GetSecurityAttributes(RuntimeModule module, Int32 token, Boolean assembly, Object[]& securityAttributes) at System.Reflection.PseudoCustomAttribute.GetCustomAttributes(RuntimeAssembly assembly, RuntimeType caType, Boolean includeSecCa, Int32& count) at System.Reflection.CustomAttribute.GetCustomAttributes(RuntimeAssembly assembly, RuntimeType caType) at System.Reflection.RuntimeAssembly.GetCustomAttributes(Boolean inherit) at System.Web.UI.AssemblyCache.GetAjaxFrameworkAssemblyAttribute(Assembly assembly) at System.Web.UI.ScriptManager.get_DefaultAjaxFrameworkAssembly() at System.Web.UI.ScriptManager..ctor() at Telerik.Web.UI.RadScriptManager..ctor() Regards, Rastislav
Since JQuery is such a small addition to your assembly wouldn't it be nice if a developer could select what version to use. So as a property I'd like useEmbeddedJqueryVersion with enums of 1,2,3 or none. This should also give you feedback on what controls need updating.