Support forums » Products » Cute Editor for .NET » Re: 6.1 Removes style tag

6.1 Removes style tag

Last post 06-20-2008, 7:28 AM by AndyFel. 4 replies.


	Sort Posts: Previous Next

06-19-2008, 5:37 AM 41568

AndyFel
Joined on 09-20-2006
Posts 275

6.1 Removes style tag

Reply Quote

If you add

.wiggle {color:#111111}

</style>

To the top of the page in html view then submit the page, or load it from DB the <style> tags are removed, leaving the .wiggle stuff.

Have tried it on your demo page and it does it too, just paste the <style stuff to the top in html view then submit it.

Have only tried in IE7 so far.

06-19-2008, 11:59 AM 41575 in reply to 41568

Adam
Joined on 09-23-2003
Aurora, ON
Posts 18,678

Re: 6.1 Removes style tag

Reply Quote

Editor.EnableStripStyleTagsCodeInjection Property

Specifies whether to remove inject <Style> tags which contain malicious, client-side executable code before writing the string into the db. When this property is set to true (the default) Cute Editor strips all <Style> tags which contain malicious, client-side executable code from the html to prevent link tag injection attack.

asp.net Chat http://cutesoft.net/ASP.NET+Chat/default.aspx
Web Messenger: http://cutesoft.net/Web-Messenger/default.aspx
asp.net wysiwyg editor: http://cutesoft.net/ASP.NET+WYSIWYG+Editor/default.aspx
asp wysiwyg html editor: http://cutesoft.net/ASP
asp.net Image Gallery: http://cutesoft.net/ASP.NET+Image+Gallery/default.aspx
Live Support: http://cutesoft.net/live-support/default.aspx

06-20-2008, 3:54 AM 41589 in reply to 41575

AndyFel
Joined on 09-20-2006
Posts 275

Re: 6.1 Removes style tag

Reply Quote

Hmmmmmm

So what you are saying is that you have added a new property in 6.1 which changes the way the editor behaves! Its just as well I havnt released this editor to our users yet, who knows how many pages this could have trashed.

You know it would be nice to have a change log, this would tell all us developers what has changed and what we may need to add to our code in order to make the editor to work the same way it used to!!!!

Its been about a month since you released 6.1 and still no sign of a change log, or mention on your website of the new release!

06-20-2008, 5:02 AM 41591 in reply to 41589

Adam
Joined on 09-23-2003
Aurora, ON
Posts 18,678

Re: 6.1 Removes style tag

Reply Quote

This property is used to prevent the script injection attacks.

06-20-2008, 7:28 AM 41597 in reply to 41591

AndyFel
Joined on 09-20-2006
Posts 275

Re: 6.1 Removes style tag

Reply Quote

I can see that!!!!

The point is from the last message, that us developers are completely unaware of how you have changed the editor and what we may need to add to our code. We need a change list for each release so that we can keep an eye on any new properties and default values that might affect the behaviour of the editor.

It all comes down to the way you do your releases. You need to do a bit a simple change control, that way we can have more confidence in cutesoft. There should be a list of releases stating whats changed functionally and dated so that we know something has changed since the last download.

Please please please, can you sort out your release mechanism, it has been asked for so much in these forums......