Intersoft Community - WebGrid Enterprise - security-vulnerability-issues-like-XSS-attack with validate Request=false

security-vulnerability-issues-like-XSS-attack with validate Request=false

handy@intersoftpt.com — Tue, 29 Nov 2011 21:09:04 GMT

Hello Madhavan,

We are going to update our developer network. It should be available soon. For now, please download R2 from our website.

Regarding this security issue, you can use ContolDataTransferFormat to JSon. It would surely eliminate XSS attack in XML.

Regards,
Handy

security-vulnerability-issues-like-XSS-attack with validate Request=false

Skgrid@intersoftpt.com — Mon, 28 Nov 2011 23:40:36 GMT

Hi Hendrik,

I got a mail from intersoft newsletter that Intersoft webui studio 2011 R2 is released.

But I am not able to see the latest setup in our developer network site.

Because i am seeing last posted date is 6/14/2011.

please advice.

Regards,

Madhavan

security-vulnerability-issues-like-XSS-attack with validate Request=false

hendrik — Mon, 21 Nov 2011 21:02:52 GMT

Hi Madhavan,

We admitted there are some processes that have not been completed, resulting in delays in the release. Now we try to release it this week or next week. For that we are apologize.

Regards,

Hendrik

security-vulnerability-issues-like-XSS-attack with validate Request=false

Skgrid@intersoftpt.com — Mon, 21 Nov 2011 01:11:42 GMT

Hi Hendrik,

Any idea on the date of the release.Because you have told middle of this month.

Regards,

Madhavan

security-vulnerability-issues-like-XSS-attack with validate Request=false

hendrik — Tue, 08 Nov 2011 21:35:43 GMT

Hi Madhavan,

Unfortunately, we do not have the beta build as you mean. But our development teams ensure that the feature will be available in the next release and it worked fine.

Regards,

Hendrik

security-vulnerability-issues-like-XSS-attack with validate Request=false

Skgrid@intersoftpt.com — Tue, 08 Nov 2011 08:06:22 GMT

Hi Hendrik,

Is there any beta build available for the same.

We want to verify the Cross site scripting feature included with the 2011 R2 release.

Thanks in advance,

Regards,

Madhavan

security-vulnerability-issues-like-XSS-attack with validate Request=false

hendrik — Tue, 08 Nov 2011 01:48:56 GMT

Hi Madhavan,

Webgrid 7. We cannot give an exact date, but about the middle of this month.

Regard,

Hendrik

security-vulnerability-issues-like-XSS-attack with validate Request=false

Skgrid@intersoftpt.com — Mon, 07 Nov 2011 23:32:24 GMT

Hi Hendrik.

Is it webgrid 7 or webgrid 8?

When is the exact date of the release.

We have to plan our release based on this.

Is it a Major Upgrade to upgrade to webgrid 8.

Regards,

Madhavan

security-vulnerability-issues-like-XSS-attack with validate Request=false

hendrik — Mon, 07 Nov 2011 23:20:31 GMT

Hi Madhavan,

This issue has been fixed, and available in the second 2011 release (R2). It will be released in this month.

Regards,

Hendrik

security-vulnerability-issues-like-XSS-attack with validate Request=false

Skgrid@intersoftpt.com — Sun, 06 Nov 2011 23:57:09 GMT

Hi Team,

We are using Webgrid 7.

We got a reply stating that in Webgrid Enterprise 8 Improved security by eliminating XSS exploit through the use of JSON as the control data format .

Do we need to upgrade to webgrid 8 or the build is avaliable with webgrid 7 latest patches?

According to the last mail

The second 2011 release (2011 R2) is estimated to ship in Q3 approximately by the end of September or beginning of October.

Is this released?

Regards,

Madhavan