[by danp]

Putting my money where my mouth is, here is what I think would be an ideal solution:


Create a property similar to .NET's Literal.Mode property which defines the behavior of a Literal's...

[by danp]

That is exactly what I am saying. But note that it's not the AJAX layer that should be encoding, it's the presentation layer (Column Renderers, Panel Bodies, Message Boxes, etc.)

In this case ext...

[by danp]

Those are the main points I have for now, I'm seriously hoping that the Ext development team starts looking at this problem again and takes it seriously.

I'm really saddened to see how few of the...

[by danp]

Point #3: All systems should default-to-secure and since Ext is primarily an HTML rendering layer, it should default-to-HTML Encode it's data unless explicitly told not to.

I don't really have...

[by danp]

Point #2: Valid is different than secure

A few people have brought up the red herring of "Well we filter for SQL Injection, so this is no different." This is wrong.

If I ask the question on a...

[by danp]

Since I have rekindled this debate, I figure I should weigh in again on this. I will do so by sharing my opinions which I hope will further explain why I feel Ext should change it's behavior.
...

[by danp]

I would like to note that our company just hit this issue too and I am of the opinion that this is a failing on the part of Ext.

Data should always be stored in a raw format and the decisions...

[by danp]

Is this issue fixed in later versions? I checked the change logs and saw no mention of it.

I'm not going to upgrade Ext in the middle of a huge project and risk breaking things if this issue is...

[by danp]

To me this is a bug, I saw nothing in the documentation that explicitly stated one way or another how baseParams should interact with passed parameters and I can't imagine why this would be desired...

[by danp]

First off, I apologize if this should in fact be in the Bugs forum, but I saw that the description of the forum stated "Report Bugs and Issues with a prerelease version (SVN, alpha or beta)"

On to...

[by danp]

This won't work unfortunately since the inputs are generated by server controls. It's crazy .NET stuff :)

[by danp]

Well randomly while searching for other things on the forum I found this thread which isolates the issue and offers a very ugly hack (which I have implemented)
...

[by danp]

Howdy all, I've searched the forum and seen no references to this so I'm posting here in the hope that I can figure out why this happens and if possible, how to fix it.

Disclaimer: I am just the...

[by danp]

I ran into the exact same issue yesterday. I am a new to .NET (but working with very knowledgeable people) We have simply created an ext:TextField that inherits from asp:TextField and has a post...

[by danp]

I have a similar issue only the form is also in my markup.

In my case as soon as I set the 'applyTo' property on the textfield the label disappears. If I remove the 'applyTo' it comes back.

The...

[by danp]

Bernard,

Thanks a bunch, I will try this out when I get back to work on Monday.

[by danp]

Howdy All,

I am setting up a non-editable grid that acts as a way to give a user permissions (See attached screenshot)

What I am attempting to do is attach an event to the checkbox in the last...