Progress® Kendo UI® for jQuery Feedback Portal
Back to Feed
Request a Feature Report a Bug
Completed
Last Updated: 24 Feb 2025 09:21 by ADMIN
Release 2025 Q1 (Feb)
Daniel
Created on: 11 Nov 2024 14:16
Category: Drag and Drop
Type: Bug Report
0
<script> tag gets executed on drag when encoding is enabled in Grid

Bug report

<script> tag gets executed on drag when encoding is enabled in Grid

Reproduction of the problem

Dojo: https://dojo.telerik.com/MkqjldFK

Drag the row by the drag handle

Alert gets executed

Expected/desired behavior
<script> should not be executed

Environment

jQuery: 3.7.0

Kendo UI version: 2024.3.1015
Browser: [all ]

3 comments
ADMIN
Martin
Posted on: 24 Feb 2025 09:21

Hello, Daniel,

I can see that my colleague has already submitted a new bug report in our Feedback Portal you can track. A fix should be available in the upcoming releases.

Let me know if you have any further questions.

Regards,
Martin
Progress Telerik

Enjoyed our products? Share your experience on G2 and receive a $25 Amazon gift card for a limited time!

Daniel
Posted on: 17 Feb 2025 19:44
Original question: Is it possible to do script/code injection with the "Drag and Drop" feature? in Kendo UI for jQuery | Telerik Forums
Daniel
Posted on: 17 Feb 2025 19:34
It appears this has been fixed for the Grid component in 2025.1.211 but not the TreeList. Are there any plans to fix this for TreeList?
Create an account Log In
View
Type
Status
Category