http://www.intersoftsolutions.com/Community/WebGrid/How-to-avoid-XML-in-WebGrid-AJAX-postback/http://www.intersoftsolutions.comenCopyright 2002 - 2015 Intersoft Solutions Corp. All rights reserved.60http://www.intersoftsolutions.com/Community/WebGrid/How-to-avoid-XML-in-WebGrid-AJAX-postback/Fri, 10 Jun 2011 03:29:53 GMTEricWebGridFilterAJAXpostbackinput validationIVPOSTHTTP<p>Ok, so please update this thread when this bug is fixed or when you know when this gets fixed.<br /></p>http://www.intersoftsolutions.com/Community/WebGrid/How-to-avoid-XML-in-WebGrid-AJAX-postback/Fri, 10 Jun 2011 00:37:56 GMThandy@intersoftpt.comWebGridFilterAJAXpostbackinput validationIVPOSTHTTP<p>Hi,</p><p>Unfortunately, due to other high priorities and urgent issues, we have to shipped SP1 earlier than expected. As the results, the SP1 doesn't include the particular work items associated to your issues. We will continue to address the rest of work items in the upcoming hotfix based on our work items queues and priorities. Thank you for your understanding in this matter. SP1 would be release in the short time.</p> <p>Regards,<br />Handy</p>http://www.intersoftsolutions.com/Community/WebGrid/How-to-avoid-XML-in-WebGrid-AJAX-postback/Thu, 09 Jun 2011 08:23:22 GMTEricWebGridFilterAJAXpostbackinput validationIVPOSTHTTP<p>Yes, I know that you promised to fix it. But has it been fixed by now? And is SP1 with the fix released? If not, when, if yes where?<br /></p>http://www.intersoftsolutions.com/Community/WebGrid/How-to-avoid-XML-in-WebGrid-AJAX-postback/Fri, 03 Jun 2011 07:25:05 GMThandy@intersoftpt.comWebGridFilterAJAXpostbackinput validationIVPOSTHTTP<p>Yes, Our developer agreed to fix this in SP1. There is no beta release. But you can try our 30days trial when install our SP1.</p><p>Regards,<br />Handy</p>http://www.intersoftsolutions.com/Community/WebGrid/How-to-avoid-XML-in-WebGrid-AJAX-postback/Wed, 01 Jun 2011 10:03:26 GMTEricWebGridFilterAJAXpostbackinput validationIVPOSTHTTP<p>Hi, Handy. In the other thread you mention that this is solved in SP1. Can you confirm here and update this thread as soon as it's fixed? Or is there a beta version available that I could test if this solves our problems?</p>http://www.intersoftsolutions.com/Community/WebGrid/How-to-avoid-XML-in-WebGrid-AJAX-postback/Tue, 15 Mar 2011 09:20:23 GMThandy@intersoftpt.comWebGridFilterAJAXpostbackinput validationIVPOSTHTTP<p>Hello Eric,</p><p>Ok, I will update the news. Our developer teams have addressed this enhancement soon after we relased R1.</p> <p>Regards,<br />Handy</p>http://www.intersoftsolutions.com/Community/WebGrid/How-to-avoid-XML-in-WebGrid-AJAX-postback/Mon, 14 Mar 2011 06:38:49 GMTEricWebGridFilterAJAXpostbackinput validationIVPOSTHTTP<p>This is bad news. But at least now we know how to continue (replace WebGrid with something else). Thanks for your answer. But please still update this thread if you have implemented this change.</p> <p>Eric</p>http://www.intersoftsolutions.com/Community/WebGrid/How-to-avoid-XML-in-WebGrid-AJAX-postback/Thu, 10 Mar 2011 05:41:55 GMThandy@intersoftpt.comWebGridFilterAJAXpostbackinput validationIVPOSTHTTP<p>Hello Eric,</p><p>Deeply apologized for the late response. Our developer teams has decided to postpone the enhancement due to the tight schedule. This enhancement would affect all our ASP.Net product because it needs to be implemented in Framework level which needs extensive testing to ensure the delivery quality.<br />The enhancement would be implemented after R1 release, the end of April.</p> <p>Regards,<br />Handy</p>http://www.intersoftsolutions.com/Community/WebGrid/How-to-avoid-XML-in-WebGrid-AJAX-postback/Thu, 10 Mar 2011 04:46:29 GMTEricWebGridFilterAJAXpostbackinput validationIVPOSTHTTP<p>Hi Handy,</p> <p>We need to try asap if the new version resolves our problems or if we have to replace all our grids with another product. Therefore we need this beta as soon as possible. Please update me.</p> <p>Thanks,</p> <p>Eric</p>http://www.intersoftsolutions.com/Community/WebGrid/How-to-avoid-XML-in-WebGrid-AJAX-postback/Tue, 08 Mar 2011 03:18:58 GMTEricWebGridFilterAJAXpostbackinput validationIVPOSTHTTP<p>Hi Handy,</p> <p>I know that there will be some issues installing it. We didn't even buy v7 yet. But I'm sure we will find a way to test it.</p> <p>But I think the most important issue is if this feature is already implemented or not. Instead of waiting for news, maybe you can ask them for the status?</p> <p>Thanks,</p> <p>Eric</p>http://www.intersoftsolutions.com/Community/WebGrid/How-to-avoid-XML-in-WebGrid-AJAX-postback/Thu, 25 Nov 2010 11:24:49 GMTEricWebGridFilterAJAXpostbackinput validationIVPOSTHTTP<p>Hi,</p> <p>We use the latest version of WebGrid 6.</p> <p>In our server infrastructure there are some servers in front of our IIS. These servers do input validation to prevent cross site scripting attacks. I have no control on what is filtered there, but I received a blocking log.</p> <p>The problem is that anything that looks like XML will be blocked. A string like:</p> <pre>" abc = … &gt;</pre> <p>anywhere in a POST data field will be blocked. And I found a blocked (AJAX?) POST request, looking like it came from WebGrid.</p> <p>Interestingly our application works - including all WebGrid functionality. But we do see some problems.</p> <p>Questions:</p> <ul><li>Does your WebGrid support such industry-standard high security environments in general?</li><li>Is there a way to avoid XML data in POST fields?</li><li>Is there a known bug in data encoding?</li><li>Do these AJAX postbacks have a special HTTP header field that could be used to distinguish if this is a special postback and not a standard form post? If yes, maybe the input validation can be disabled (or relaxed) for such requests.</li></ul> <p>It would be great if you could answer these four questions.</p> <p>Regards,</p> <p>Eric</p>