Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeDNN Open Source...DNN Open Source...Module ForumsModule ForumsReportsReportsUse of form-elements in html template not possible?Use of form-elements in html template not possible?
Previous
 
Next
New Post
9/22/2008 11:31 AM
 

I am trying to make a form containing items from a sql statement.
 

F.ex: Rolename: <input type="checkbox" name="test" value="[RoleName]">

Is this disabled by default in Reports module? Because when I try to do this it doesn't show anything.

 
New Post
9/22/2008 12:01 PM
 

 Yes, the HTML is cleaned to remove <input> <script> and other "dangerous" tags.  This is done because the HTML template can be provided by an Administrator. If it contained <input> or <script> tags (etc.) an Administrator could inject malicious code to gain elevated permissions (i.e. they could become a SuperUser).  I will consider reviewing the security model but I can't guarantee exactly when that will happen.

As a temporary workaround, if you are familiar with Visual Basic.Net or know someone who is, you can take a look at the source code and remove the line that performs the cleaning.  I believe (don't have the code with me, atm), it is in the Visualizers/HTML/Visualizer.ascx.vb file.


Andrew Nurse
DotNetNuke Core Team Member and Reports Module Project Lead
Microsoft Certified Professional Developer

 
New Post
3/15/2009 12:16 AM
 

Please, reconsider this. I am doing bad programming to get past this problem although I am a superuser. I had to create a javascript jQuery to query elements inside my document because the parser does not render the script blocks. Thanks...

 
New Post
3/15/2009 2:32 AM
 

I'd suggest looking at something like OpenWebStudio which is a free open-source development tool for DNN.

Here you can work with form elements and I've added a sample configuration for this here in their forums.

Hope it helps.

 
Previous
 
Next
HomeHomeDNN Open Source...DNN Open Source...Module ForumsModule ForumsReportsReportsUse of form-elements in html template not possible?Use of form-elements in html template not possible?


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out