PDA

View Full Version : Ext.grid.EditorGridPanel??????????????????



Mari
24 Jul 2009, 11:52 PM
Ext.grid.EditorGridPanel???????????grid?????????

??????HTML???????????????????????render????????????????????????????????
??????????????????????
http://extjs.com/deploy/dev/examples/grid/edit-grid.html
??????BR?????????????????????????
???Submit??????????????????????????????

render?????escape??????????????????????????????????????????????????
???Ext????????????????????????

???????????

Tommy1969
25 Jul 2009, 10:02 AM
??????renderer ? Ext.util.Format.htmlEncode ??????????

????????????????????????????????:((

yuki
26 Jul 2009, 10:00 PM
?????????????XSS???????????????????????????????????????????XSS????????????


Ext.grid.EditorGridPanel???????????grid?????????

??????HTML???????????????????????render????????????????????????????????
??????????????????????
http://extjs.com/deploy/dev/examples/grid/edit-grid.html
??????BR?????????????????????????
???Submit??????????????????????????????

render?????escape??????????????????????????????????????????????????
???Ext????????????????????????

???????????????????????????? (http://extjs.com/forum/showthread.php?t=13913)??????????????????????????? vs ???????????? vs ?????HTML??????????Jack??? (http://extjs.com/forum/showthread.php?p=68231#post68231)????????????????????


grid.on('validateedit', function(e){
e.value = Ext.util.Format.stripTags(e.value);
});

Mari
27 Jul 2009, 1:54 AM
???????????????

?????XSS??????????????8-|
??????????????????????????????????????????????????

????renderer??grid???????????????????????????
<BUTTON type="button" onClick="history.back();">
???????????????????????????????????????????????????????

????????????????
?validation???????????onblur??????????????????????????grid??????????
??????????grid?????????????????HTML?Input???????????????
??????<BR>??????????renderer????????<BR>?????????????????????????EditorGridPanel??????????????????

????????????????renderer?????Ext.util.Format.htmlEncode???????????????????
????????????