Questions on Kendo UI for jQuery Forum

2 questions

0 answers

22 views

Textarea changing the cols option value doesn't seem to show any discernable difference (no change evident).

Given this code:

cols - API Reference - Kendo UI TextArea - Kendo UI for jQuery (telerik.com)

If I change the cols from 30 to 3 it doesn't seem to change the width of the textarea? Isn't the width of the textarea supposed to decrease?

<textarea id="description"></textarea>
<script>
    $("#description").kendoTextArea({
        rows:20,
        cols:30,
        resizable: "vertical"
    })
</script>

Is this a bug?

Thanks!

George

TextArea

asked on 07 Mar 2024

0 answers

67 views

Cross Site Script prevention on Editor , createLink pop up.

Hi Team,

We recently ran security scan on our web application which using "https://kendo.cdn.telerik.com/2020.2.513" Version.

and we encountered one scenario where Cross Site script executed even though we implemented encode and decode.

Scenari: User opens editor -> Clicks Insert Link Option.

We filled URL, Text inputs and for Tooltip fields we input Cross Site Script i.e (">">">"><script>alert(document.cookie);</script>)

and we clicked INSERT.

Basically the Tooltip field will break the anchor tag title parameter and script will execute.

Though we have implemented HTML encode and Decode we still experiencing this alert popup with cookie data while encode and Save and also Decode and Show.

Thanks In Advance.

Please let us know is there any inbuilt functionality in Kendo to handle this type of issue.

Editor

TextArea