[JanyParticipant]

Hi Team,

Any update on this?

Not restricting characters on the input field used for search is OK, but the text entered for search should be treated as text, and it should not be executed as script. Currently when we enter some scripts as search input, it is not treating it as simple search text, instead executing the entered text. This happens only when multiselect mode is true in jqx-combo-box

Thanks
Jany

[JanyParticipant]

Hi Peter Stoev,

Any update on this.

Thanks
Jany

[JanyParticipant]

Hi Peter Stoev,

I agree with you on not restricting on the input field used for search.

But the text entered for search should be treated as text, and it should not be executed as script. Currently when we enter some scripts as search input, it is not treating it as simple search text, instead executing the entered text.

Thanks
Jany

[JanyParticipant]

Hi Team,

Any update on this defect? We are waiting for your comments to get back to our customer.

Thanks
Jany

[JanyParticipant]

Hi Hristo Hristov,

Please let us know what is the plan to address this? Do you have any open defect for this? We use jqwidgets in our product and our customers raised this as severe security issue.

Thanks
Jany

[JanyParticipant]

Thanks Peter Stoev!

[JanyParticipant]

Thanks Peter Stoev for the confirmation. You say its not possible from column headers, i assume its the same for individual column cells also.

Thanks
Jany

[JanyParticipant]

Thanks Peter Stoev for your reply. Any plan of supporting this capability?

[Author]

Posts