Your Privacy Matters: We use our own and third-party cookies to improve your experience on our website. By continuing to use the website we understand that you accept their use. Cookie Policy
820
How to restrict Grid Row Editing XSS (Cross site scripting)
posted

hi all
I am looking for a way to sanitize inputs to keep script from being executed when editing grid records.

If i add something simple as '<img src=z onerror=alert(278)>' into an rowEdit input, the script will execute.  Is there a simple or native option to restrict or treat input values as text?