Messages

1

Help for ParamQuery Grid (free version) / How to prevent Cross-site Scripting(Xss) when input data

« on: March 05, 2019, 09:42:49 am »

I'm trying to edit cell data with text "<script>alert('something')</script>" but it seem possible .
Have any attribute of pqGrid to prevent XSS?

2

Bug Report / Header was duplicated

« on: March 04, 2019, 02:21:42 pm »

Firstly, really sorry for my poor english.
When numberCell: { show: true} is defined, table header is displayed correctly but when I inspect element DOM html, table header was duplicated.
In my case I want to use the input text in header but when I using jquery selector to select this input text, it cannot be selected.

Code: [Select]

var colModel;
colModel[1].title = "<div class='form-group'><label for='student'>Student</label><input type='text' class='form-control' id='student' style='width: 180px'/></div>";
....
$("#tabbe").pqGrid({
...
colModel: colModel
...
})

Jquery selector:

Code: [Select]

var student = $("#student");
Cannot get the element that is displayed in page.