ASP.NET Dynamic Data

Re: Edit.aspx page hanging on text entry

sjnaughton — Thu, 04 Jun 2009 07:03:07 GMT

Thanks Peter that explains better than I did the risks involved with setting ValidateRequest="false"

Re: Edit.aspx page hanging on text entry

PLBlum — Thu, 04 Jun 2009 01:27:45 GMT

sjnaughton:
This is not good practice as it leaves you control open the user entering anything they want script etc, it then become entierly up to you to validate input.

To add to Steve's thought, you may need to use ValidateRequest="false" but you should immediately add defensive code that neutralizes any attacks or blocks HTML and scripts that you consider illegal. Look for "Cross site scripting attack" in your searches.

Re: Edit.aspx page hanging on text entry

sjnaughton — Tue, 02 Jun 2009 10:16:50 GMT

malkier22:
adding ValidateRequest="false" in the tag <%@ Page ...%>

This is not good practice as it leaves you control open the user entering anything they want script etc, it then become entierly up to you to validate input.

Re: Edit.aspx page hanging on text entry

sjnaughton — Tue, 02 Jun 2009 10:13:40 GMT

See HTML Editor FieldTemplate for Dynamic Data Using AJAX Control Toolkit Editor

Re: Edit.aspx page hanging on text entry

malkier22 — Tue, 02 Jun 2009 10:11:07 GMT

I was able to integrate the AJAX RTE however the error still bugged me. I was fianlly able to nail down the error to WebForms.PageRequestManagerServerErrorException: Status code 500 which appears to be fixed by...

by adding ValidateRequest="false" in the tag <%@ Page ...%>

problem fixed, thank you all

Re: Edit.aspx page hanging on text entry

sjnaughton — Mon, 01 Jun 2009 16:51:55 GMT

Hi Malkier22, there is a new Control in the AJAX Control Toolkit see it HTML Editor that should do the trick and it's free.

Edit.aspx page hanging on text entry

malkier22 — Mon, 01 Jun 2009 16:08:59 GMT

I am trying convert a project from asp classic to asp.net. The asp classic version has a edit table page that allows users to enter data into textfields that contain html mark up. like <b>, <i>, etc. I have been working with the dynamic data video collection and when I try to hit update after entering any html markup in a textfield, in edit.aspx, the page just stops. It does not throw an error nor does not redirect to the list.aspx on update or cancel, and im pulling my hair out trying to figure out why its doing this. I have tested various different data types and nothing is helping. Anyone have any ideas? The error happens on the sample code provided on the dynamic data page.