Hi Team,

We recently ran security scan on our web application which using "https://kendo.cdn.telerik.com/2020.2.513" Version.

and we encountered one scenario where Cross Site script executed even though we implemented encode and decode.

Scenari: User opens editor -> Clicks Insert Link Option.

We filled URL, Text inputs and for Tooltip fields we input Cross Site Script i.e (">">">"><script>alert(document.cookie);</script>)

and we clicked INSERT.

Basically the Tooltip field will break the anchor tag title parameter and script will execute.

Though we have implemented HTML encode and Decode we still experiencing this alert popup with cookie data while encode and Save and also Decode and Show.

OR
Please let us know.

How to restrict user to input only Alphanumeric Values into the fields "Text", and "ToolTip" when user clicks "Insert Link" option on Kendo tool Editor (CK Editor).

It would be good user interaction when multiple node selection is implemented.It saves lot of rework

I sense the speed of this effect is not as fast as androidMDL and ios slide/overlay effects. We could be able to make it master or slower depending on our needs.

If i have a hierarchy location, for example country, city and postal code, i can only use location as field and can't use country, city or postal code. If i want to use them indiviually i would have to configure them as extra attributes in the olap schema.

It would be nice, if these hierarchies could be used as fields.

Add format configuration for Pivot schema rows and columns. Like aggregates config.

Refresh Event Handler for refreshing the grid with refresh set to true

In SSAS world you can often see mega cubes with many measures and dimensions. Currently Kendo pivot grid configurator does not show measure groups and therefore there is no way to filter dimensions and filters that belong to a specific measure group.

We are using the functionality included with the grid (mvc and .net core) to save and set filters, sorts and groupbys.  Where the functionality fails is if the grid or columns change in any way (including toolbars).  the getoptions() and setoptions() is a snapshot in time and is not very adaptive.  Our users had 1000's of saved grids and was really not allowing us to change the grid data or columns or even change the default order of the columns.  What we ended up doing to allow the saved grids to work and the developers to have the freedom to change the grids was:

1.  Getting the grid that is passed down to the screen and saving it for a clear functionality (and knowing what the default was supposed to be).

2.  Looking at the sort, groupby and filter subcomponents of the saved grid objects by column and looking for a column match in the grid that was passed to the screen.

3.  If a column in the saved grid does not exist, do not apply those filters, sorts and groupby's and alert the user

4.  Only apply/change the filters, sorts and groupbys via a setOptions() on the grid that is passed down as opposed to a set of the entire object.

6.  If a column is added to the grid alert the user that the column is added

7.  If the grid has changed, use a getOptions() to resave the users selections with the modifications above

8.  Load the data 

We have javascript that does the column compare, with differences in the grid if your developers would like to see how we solved this issue. 

You should contact me or another lead community expert on ColdFusion to add examples for that platform.

Currently there is now implementation to support Guid data types. There is a workaround to use parameter mapping but this is not working when using custom methods for read\update... methods. I am heavily using web.ai driven odata endpoints and therefore I need custom transport methods and I am not able to filter Guids because auf these limitations.

Hi,

We have extensively used the Kendo Grid's current() function to get the current selected cell in the grid. It appears this field is always returning undefined when used in a touch enabled device (e.g. Notebooks with touch screen, Surface, Mobile Devices). We have tried this with various browsers including Chrome and Firefox. 
To reproduce the issue in Google Chrome, please follow the following steps:

Go to Developer Console
Go to Emulation Tab
Select Model: Notebook with touch 
Open the following link: http://jsbin.com/qivigoceva/1/edit?html,js,console,output
Select a cell in the grid. The console should show the reference to current cell. It will instead show undefined.

The current() function is extremely important to us as we need to get the cell reference. Currently many of our client's are having trouble due this issue. Please provide us a solution as soon as possible.

=====================================================
Hello Khalil,

This behavior is expected, as the keyboard navigation is not meant to be used on touch enabled devices, as there is no hardware keyboard present. I am afraid that currently there is no workaround for this behavior.

Regards,
Kiril Nikolov 
Telerik
=====================================================

Hello Khalil,

If you want to get the currently selected element, you can use this.select() that will return the element that is selected in the change event handler.

Regards,
Kiril Nikolov 
Telerik
=====================================================

Dear Kendo Team, 
this.select() will return the current select tr , but we need the current focused td in the selected row. We cant avoid row selection in this grid.

And also we are using devices(Laptop with touch) with keyboard (hardware) .
====================================================

Hello Khalil,

I am afraid that this is not possible on touch devices. You can submit this as a feature request on UserVoice, so that it is considered for implementation in a future release.

Regards,
Kiril Nikolov 
Telerik

Datasource result support querying the entities with ef directly column names present in the class.There should be a way to filter the entities with lazy loading them and firing the filters on them ..like if the entity candidate contains the list of interviews the ,then the canidate.interviews should be passed in the filter and value and operator should be passed

We want to create a generic Virtual Kendo DropDownList and use it where ever necessary in the entire project.
For that we would need to know the control id in valuemapper and parametermap. Please give us the access to that.

Thank you!

Often I have a MVVM model with an enumerable field which is used to populate dropdowns.

I know this data won't change, so I'd like to avoid wrapping into ObservableArray to increase performance, and I name this field, e.g., "_data" (starting with "_" to prevent wrapping).

But kendo throws an error in this case when dropdown's value is changed, 'cause it calls internally "get" method on change, which belongs to Observable.

An option to trigger swipe on touchend, and support for cooperative drag and swipe events.

Add ability for tooltip on chart title text on Mouseover event, So we can provides more details about chart. 

Current tooltip option is not supported on Kendo chart title text.

New edit mode:  When events are retrieved, those models should always be as lightweight as possible (id, start, end, title), and not include all the other properties required to edit an event.

If you have hundreds of events with lots of properties, your control does not scale well.  When you then edit one of these lightweight events, it should make an ajax request to go fetch the "full" model used to populate the edit popup window.  For the create, it may not have to make an ajax request, but the "full" schema needs to be defined still, so it has a model to bind, and it would be nice to have a way to dynamically specify that schema, in case you have different event model types.  In my case, I have three different types of appointments the user can create/edit.  Ideally, these "full" models would either get sent via ajax when the popup is closed, or when the datasource is synced, they get trimmed down to the lightweight version.  Hopefully this all makes sense...it's all about having tiny models for speed, but larger models for editing.  Anyone that has used your control to show tons of appointments (especially with many properties each) will likely get where I am going with this.

We are looking into the scheduler but it seems to be missing a feature that we would really want in a scheduler.

If you are for example in the day view, you have left the timebar and right the events. It would be nice to zoom in on the times on the left.

instead of showing events from daystart - day end you would click on a chosen starttime drag to the endtime you wish and the scheduler would zoom in on items between the selected start- endtime.

Allow users to get events callbacks in dragging columns in Grid widget i.e DragEnd, DragStart etc.