Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeOur CommunityOur CommunityGeneral Discuss...General Discuss...Telerik HTML Editor in DNN 6.1.0Telerik HTML Editor in DNN 6.1.0
Previous
 
Next
New Post
11/2/2011 11:38 AM
 
Good to know, the issue is that it severely limits what people can do editor wise.

-Mitchel Sellers
Microsoft MVP, ASPInsider, DNN MVP
CEO/Director of Development - IowaComputerGurus Inc.
LinkedIn Profile

Visit mitchelsellers.com for my mostly DNN Blog and support forum.

Visit IowaComputerGurus.com for free DNN Modules, DNN Performance Tips, DNN Consulting Quotes, and DNN Technical Support Services
 
New Post
11/2/2011 12:43 PM
 
This is a huge issue and will be holding me back from upgrading. Any sort of work around would be greatly appreciated. Thanks, Andy
 
New Post
11/2/2011 5:29 PM
 
This is not only a huge issue, it's bigger than indicated here. DNN has done something at the CORE DATABASE LEVEL, outside the editor provider to search and replace user entered content removing script tags. That is UNACCEPTABLE. It doesn't matter what your editor is set for - ck, fck, telerik or rad - it strips the content. If you edit something with a script you CANNOT roll it back or recover it once you've upgraded to 6.1. I'm perfectly ok with you enacting a security setting to strip all script tags AS AN OPTION. But forcing it down the users throat, and then not emblazoning every single tech note and download link with warnings about it is reckless and irresponsible. This is not something that shows up in normal upgrade checks, so you might not detect this until your site has been in use for quite a while. In the meantime you're moving further and further from your original backup and checkpoint.

We need an emergency hotfix for this issue. I for one won't be recommending that 6.1 be deployed anywhere until this is fixed. I already am eating the cost of rolling back two websites we upgraded for clients because your techs couldn't be bothered to warn us about his issue ahead of time.
 
New Post
11/2/2011 5:45 PM
 
In all of the previous versions you could disable script stripping if you wanted to, no matter what the editor.  Sometimes it involved making a change to a config file but it could be done .  Most of my more sophisticated users use scrpts extensively.  On my own site they are used to (for instance) embed widgetbox script for various specialized dashboards and controls, perform google analytics for landing page tracking and pipeline tracking, allow us to embed certain script-based players, embed advertising from Microsoft and other sources, etc.  How do you suggest we accomplish those tasks now that you've disabled the ability to do so inside html?  You already had the ability in Telerik to control which user roles could and could not embed script in their edits, you already defaulted that to strip scripts.  If Telerik has a serious security issue and you have a relationship with Telerik - does that not imply that it should be Telerik's responsibility to issue, test and support a fix here?  <br /> <br /> Injecting script is NOT a hack - it's a feature.  And one used extensively by your users.  Not that you bothered to ask your users.<br /> <br /> I guess my big concern here is that:<br /> <br /> A) This change wasn't discussed and users weren't surveyed ahead of time to determine the extent of legitimate script usage in common use today.  I'd say a full 80% of my clients sites have some sort of legitimate embedded code in their HTML.  Not that anyone asked.<br /> <br /> B) There were no warnings before performing this breaking change to the code, nor were there any warnings on the release of the code.  There is no way to roll back content and restore the scripts.  There is no way to disable the behavior. Short of rolling the entire site back to a previous version of DNN there is no way to recover the info once it's been edited.  There is no warning to the user "Saving this will strip important > tag content from the your system permanently - OK?"<br /> <br /> C) The "well we didn't like it much so we just got rid of it" attitude showing here.  I don't care what OTHER CMSs do.  If other CMSs jumped off a bridge would you jump off a bridge too?  THIS CMS provided those of us with the knowledge and ability to put useful and flexible jscript code into client's html panes.  That is part of why THIS CMS was chosen - it's a feature whether you like to think of it as such or not.  Consider this - without this ability the cost of an implementation of DNN just skyrocketed.  My client wants a widget box or microsoft ad embedded on their site? Sorry we have to write you a CUSTOM MODULE for JUST that specific purpose, and no you can't mix that with the rest of your HTML content.  Even retrofitting old sites to use this methodology would cost clients astronomically.  How well disposed to speak kindly of your CMS will they be after they get that bill?<br />
 
New Post
11/2/2011 5:47 PM
 
PS the editor in the forum is leaking <br>s....
 
Previous
 
Next
HomeHomeOur CommunityOur CommunityGeneral Discuss...General Discuss...Telerik HTML Editor in DNN 6.1.0Telerik HTML Editor in DNN 6.1.0


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out