Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeDNN Open Source...DNN Open Source...Module ForumsModule ForumsForm and ListForm and ListVery strange problemVery strange problem
Previous
 
Next
New Post
10/6/2009 1:56 AM
 

Well, if a non admin enters the text, script filtering is enforced. This removes the object tag. There is no option to change this behavior, and I think it would even not be wise to change it.

Nevertheless, I will talk to the security team how to handle this in future. In the mean time, I suggest to solve this with a calculated column or XSL script. This is even a much cleaner approach.

 

 
New Post
10/6/2009 9:03 AM
 

Dear Stefan

Can you give an example of the calculated column or XSL script for my problem , Do you mean that i have to change the code to XSL script if so how??i know a little of XSL , what i will use instead of <object> , <script> in the xsl , it is very confusing

About security i tried the code in a normal HTML module it worked  .

Do the UDT 3 has the same security issue??

What about making a security role that is alowed to add script , is that possible??

here is the code any idea is appreciated

 <object id="Object1" type="application/x-shockwave-flash" data="/Portals/6/FlashPlayer/player_flv_maxi.swf" width="240" height="150"> <script><a href=http://www.dvdvideosoft.com/converter/video/mp4-video-converter.htm>mp4 converter</a></script> <param name="movie" value="/Portals/6/FlashPlayer/player_flv_maxi.swf" /> <param name="allowFullScreen" value="true" /> <param name="wmode" value="opaque" /> <param name="allowScriptAccess" value="sameDomain" /> <param name="quality" value="high" /> <param name="menu" value="true" /> <param name="FlashVars" value="configxml=/Portals/6/FlashPlayer/5goals_tcm6-524532.xml" /></object>

Please i know i took a lot of your time but it is very urgent

Thanks

 
New Post
10/8/2009 11:03 AM
Accepted Answer 

This is a feature, not an issue, and UDT provides the same security feature.

Now lets get your task solved:

Add a fields "SWF" of type download, and two fields "widh" and "height" of type integer. Disable visible for all these columns.

Add a field "Video" from type calculated column. Enter the following string as expression:

'<object id="Object1" type="application/x-shockwave-flash" data="' + [SWF_UDT_url] + '" width="' + [width] + '" height="' + [height] + '"> <script> <a href=http://www.dvdvideosoft.com/converter/video/mp4-video-converter.htm>mp4 converter</a></script> <param name="movie" value="' + [SWF_UDT_url] + '" /> <param name="allowFullScreen" value="true" /> <param name="wmode" value="opaque" /> <param name="allowScriptAccess" value="sameDomain" /> <param name="quality" value="high" /> <param name="menu" value="true" /> <param name="FlashVars" value="configxml=/Portals/6/FlashPlayer/5goals_tcm6-524532.xml" /></object>'


 

 
New Post
10/8/2009 2:59 PM
 

Dear Mr Genius

Thank you Thank you Stefan  ,Finally it works ,I really appreciate your help and i know it wasn't an easy task .

You are "Abkary" means genius in arabic.

God Bless You

 

 
New Post
6/1/2012 10:43 AM
 
Stefan Cullmann, wich version of Form and List is compatible with DNN v.5..02.00?
 
Previous
 
Next
HomeHomeDNN Open Source...DNN Open Source...Module ForumsModule ForumsForm and ListForm and ListVery strange problemVery strange problem


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out