Hi Team,

Does Track Changes work if Multiple Users work Simultaneously on Editor and

Is it possible to view all Users Name and Date Time in different pane, after enabling Track Changes.

Instead of utilising 3rd party jQuery or the boring old ASP client-side form/field validation why don't you guys develop your own that has nice look and functionality similar to this:

https://github.com/posabsolute/jQuery-Validation-Engine

and you could also include a password strength indicator like this while your at it:

http://git.aaronlumsden.com/strength.js/#demo

Not hard and it would nicely complement your current suite of tools, especially if it was styled from skins. 

Progress Telerik seems to be more focused on pursuing technology we’re not using, and There haven’t been major upgrades to the Windows Forms and ASP.NET controls that we use in our legacy apps.

The tools are great and we use them extensively, even in newer upgrades to our legacy apps.

But we haven’t seen a whole lot of improvements where we’d like to see them, so it’s not worth the maintenance cost.

On the Windows Forms side, we spend a lot of time navigating through the multi-layer structures of the tools, a set-wide consistent change that was implemented over 5 years ago.  It’s good for consistency, but makes certain properties and events unintuitive.  (E.g., “Why won’t this drop down list work handle the ENTER key being pressed?” “Well, that’s actually the enter event in the embedded control.”)

Our biggest usage on Windows Forms tools are RadButton, RadPageView, RadToggleButton, RadTextBox, and RadSpinEditor – and THAT’S IT.

And they are fairly stable and unchanged in the Progress Telerik line.

On the ASP.NET/AJAX side, it’s frustrating not to have things like cascading drop boxes without getting into a whole lot of Javascript and AJAX coding… which sort of defeats the point of buying a product that proposes to do all that for you. That’s been the only thing we hoped to see updated, some kind of way to preload multiple combos and have it auto-filter based on linked selections, and it never happened.

Our biggest usage on ASP.NET/AJAX tools are RadComboBox, RadDatePicker, RadEditor and RadSpell – and THAT’S IT.

These are also fairly stable and have been mostly unchanged in the Progress Telerik line.

Progress Telerik is rightfully focused on more emerging technologies – we don’t fault the company for that – but most of our work is legacy software we built 10-20 years ago and still maintain, or new clients wanting similar products (so it makes financial sense to use the legacy platform as a basis).  If we had an unlimited budget and R&D time, we’d LOVE to explore all the newer technologies and platforms… but it’s just not compatible with our business model (which serves small and mid-range companies with VERY tight budgets).

That makes it hard to justify the thousand or multi-hundred dollar maintenance fee to get periodic patches, when the existing versions are stable and working just fine for us.

If seems like Progress Telerik almost treats these tools as legacy products, and that it’s really not focused on them as much. (Again, we understand, that makes sense.)

Greetings!

Description:

I have found a Cross-Site Scripting issue in the rich text editor, RadEditor. This is not in a body where user provides certain strings, rather it's in the text properties which gets sent along with the user input, such as font-style. The developers were able to follow the filtering mechanisms given in at https://docs.telerik.com/devtools/aspnet-ajax/controls/editor/managing-content/prevent-cross-site-scripting-(xss), but it provides protection for the inputs given in <textarea>, and for the properties values. Hence XSS is still possible

Steps for Reproduction:

1. Open up the text editor {{Screenshot 2020-09-23 at 12.08.51 PM.png}}

2. Input a string and change its font style.

3. Click on submit and intercept the request. {{Screenshot 2020-09-23 at 12.14.45 PM.png}}

4. Now we need to modify the request body for parameter of texteditor's ID. You may notice that the font-style is set and sent by using a <span>.

RadEditor1=%253cspan%20style%253d%2522font-family%253a%20%2527MS%20Sans%20Serif%2527%253b%2522%253etextexttext%253c%2Fspan%253e

Change parameter 'RadEditor1's value with the following:

RadEditor1=%253cspan%20onmouseover%253d%2522document.body.innerHTML%253d%2527ioioioioioioioioo%2527%252bdocument.cookie%2522%20style%253d%2522font-family%253a%20%2527MS%20Sans%20Serif%2527%253b%2522%253etextexttext%253c%2Fspan%253e

5. Submit and notice the 200 OK response. Now go to the text editor and notice that the string texttexttext can be seen. {{Screenshot 2020-09-23 at 12.24.18 PM.png}}

6. Put a mouse cursor on the string and notice that it gets changed to ioioioioioioioioo<domainCookies>.

##################

Please let me know if given information doesn't suffice the abilities for reproduction.

Thanks,

Dhiraj

We used Telerik in our application. The network team reported a spam in it.

Using Telerik grid with SortExpression in telerik:GridTemplateColumn, has been reported as high priority network issue.

Issue name : Ajax request header manipulation (DOM-based)

Recorded the issue in below snippet of responce.

onclick="Telerik.Web.UI.Grid.Sort()"
 
Please let me know if you have any suggestions.!!!

Reproduction of the issue

RadGrid declaration

<telerik:RadButton runat="server" Text="PostBack"  AutoPostBack="true"></telerik:RadButton>
<telerik:RadGrid runat="server" ID="RadGrid2">
    <MasterTableView DataKeyNames="Column1" ClientDataKeyNames="Column1" CommandItemDisplay="Top">
            <Columns>
            <telerik:GridBoundColumn UniqueName="Col1" DataField="Column1" HeaderText="Col1"s></telerik:GridBoundColumn>
                <telerik:GridBoundColumn UniqueName="Col2" DataField="Column2" HeaderText="Col2"></telerik:GridBoundColumn>
                <telerik:GridBoundColumn UniqueName="Co13" DataField="Column3" HeaderText="Co13"></telerik:GridBoundColumn>
                <telerik:GridBoundColumn UniqueName="Col4" DataField="Column4" HeaderText="Col4"></telerik:GridBoundColumn>
        </Columns>
    </MasterTableView>
    <ClientSettings ReorderColumnsOnClient="false" AllowColumnsReorder="true">
            <DataBinding Location="~/Api/RevCodeGrid" SelectMethod="GetDataAndCount2"   >
        </DataBinding>
    </ClientSettings>
</telerik:RadGrid>

RevCodeGridController

public class Test
{
    public String Column1 { get; set; }
    public String Column2 { get; set; }
    public String Column3 { get; set; }
    public String Column4 { get; set; }
}


[HttpPost]
public virtual RadGridResultData GetDataAndCount2(object context)
{
    List<Test> items = new List<Test>();
    items.Add(new Test() { Column1 = "1", Column2 = "A", Column3 = "A1", Column4 = "A12" });
    items.Add(new Test() { Column1 = "2", Column2 = "B", Column3 = "B1", Column4 = "B12" });
    items.Add(new Test() { Column1 = "3", Column2 = "C", Column3 = "C1", Column4 = "C12" });
    items.Add(new Test() { Column1 = "4", Column2 = "D", Column3 = "D1", Column4 = "D12" });

    return new RadGridResultData { Data = items, Count = items.Count };
}

Hello there,

We want to use pdf viewer on a web form page that users use to search.

Do we have the opportunity to mark(HighLights) the words users are looking for in the document which is opened in the viewer?

I added a document to be an example,

For example, we want to highlight the word "computer" on the viewer .

Example demo: https://demos.telerik.com/aspnet-ajax/combobox/examples/overview/defaultcs.aspx

And here's what JAWS sees:

Note the extra unlabeled "Button" following every combo box. This is confusing to the reader. They have no way to know that it is associated with the preceding field.

Additionally, I've noted that when aria-support is turned on, this button becomes focusable. Tabindex="0" is added to the span inside the text box. We prefer the older functionality where the button was not a tab stop. Which is the same behavior you have when aria support is turned off. For reference, see your own aria demo:

• https://demos.telerik.com/aspnet-ajax/combobox/examples/wai-aria-support/defaultvb.aspx?show-source=true

Note that the tab key stops on the drop down arrow. (You can check the previously linked demo and see that the arrows in those boxes are not tab stops.)

If right-click the arrow and inspect, you'll find the following: 

<span id="ctl00_ContentPlaceholder1_RadComboBox2_Arrow" class="p-icon p-i-arrow-60-down" role="button" aria-controls="ctl00_ContentPlaceholder1_RadComboBox2_listbox" tabindex="0"></span>

Adding aria support should not change behavior, so we'd prefer the tab stop was removed.

In our own application, we have additional problems when the button is focused and activated with either the "space" or "enter" keys, it refocuses the field, but it does not actually open the drop down. I do not see that problem in your demo. However, if the arrow button was removed as a tab stop and from the INS+F5 dialog, this would not be a problem.

Please note that all of the above is in Chrome. 

Workaround: 

Using the following code in the OnClientLoad event of the ComboBox:

  var _DropDown_OnClientLoad = function (sender, args) {
    var input = sender.get_inputDomElement();

    //Remove tabindex from down-arrow button. We never want to focus this button.
    $telerik.$(input).siblings("button").find("[role=button]").attr("tabindex", null);

    //hide the down-arrow button from screen readers. The entire combo box
    //should be considered a single control.
    $telerik.$(input).siblings("button").attr("aria-hidden", "true");
}

Hi,

Is it possible to exercise the NullText option for the control RadDatePicker for ASP.NET AJAX

Thanks

Gita

When setting client events in a RadTextBox and using an EmptyMessage, the EmptyMessage will trigger the event on page load.  This is true for a multiple TextMode but others are untested. 

Label position dynamic. I'm currently using "InsideBase", but if those values are so small it's not very visible, so i'd like place those on the outside end.

Add a Marimekko chart type to charts (HTML5). Similar to this one:
http://www.fusioncharts.com/demos/gallery/#marimekko-charts

Allow RadGantt to export the data to Excel

The SearchRow in RadGridView WinForms is extremely good.

https://docs.telerik.com/devtools/winforms/controls/gridview/rows/search-row 

How can we implement the same in ASP.Net Ajax RadGrid?

Would be incredibly handy if we could programmatically set the image to a byte array with the RadImageTile (or I guess RadImageAndTextTile). Right now you can only set it via the ImageURL but we don't want to store the image like that, we want to read the image from the DB, so we're reading it out as a byte array.

This is possible in your RadBinaryImage, I think, but not in the RadImageTile. 

RadNavigation can be setup to expand on hover (see demo - http://demos.telerik.com/aspnet-ajax/navigation/functionality/expand-on-hover/defaultcs.aspx).

However, when the menu is collapsed to the More (hamburger) menu this functionality is lost. If the nodes don't have a navigate url they can be clicked to open the sub menu, but if they are set to navigate then clicking will navigate instead of opening the submenu.