Changeset 1172 for FCKeditor.Net/trunk/FCKeditorConfigurations.cs

Timestamp:

2007-12-04 13:26:38 (10 months ago)

Author:

fredck

Message:

Fixed #294 : The HtmlEncodeOutput setting is enforced by the editor component, to avoid having to set ValidateRequest="false" on pages using the editor.

Files:

• FCKeditor.Net/trunk/FCKeditorConfigurations.cs (modified) (1 diff)

FCKeditor.Net/trunk/FCKeditorConfigurations.cs

@@ -70 +70 @@
                         }
 
+                        // To avoid the "A potentially dangerous Request.Form value was
+                        // detected from the client" error, forcing developers to set
+                        // validateRequest=false in their pages, we are forcing
+                        // HtmlEncodeOutput to "true", if not defined. (#294)
+                        if ( !_Configs.Contains( "HtmlEncodeOutput" ) )
+                        {
+                                if ( osParams.Length > 0 )
+                                        osParams.Append( "&" ) ;
+
+                                osParams.Append( "HtmlEncodeOutput=true" ) ;
+                        }
+
                         return osParams.ToString() ;
                 }