I have a web application where I want to stop any malicious JS to execute.
For example:
http://www.mywebsite.com/default.aspx?ID=<script>alert("hello")</script>
If a client does the above then an alert box pops up on the client screen. How to stop that.?
Also I have set validateRequest="true" in the machine.config but still the JS does get execute.
My app creates a randomly-generated password when an account is created. I just tried to log in with a new account, and ASP.Net treated the following password as malicious input:
vkx&#!n#
Do we know why this particular password triggers a validation exception?
Exception information: Exception type: HttpRequestValidationException Exception message: A potentially dangerous Request.Form value was detected from the client (ctl00$ContentPlaceHolder1$txtPassword="vkx&#!n#").
I am in trouble in to remove malicious code from our so many site , develope in asp.net andn in asp.
Most of the time hacker inject the code in Body tag at onload evenet and also at the end of html tag using Java Scriprt.
how to prevent it by programing a code in asp.net or in java script or by other...
firstly i am not really an ASP.Net developer but i do work in C#.
Anyway one of the application that i develop has an ASP.Net section and i need to amend it.
I want to add a Checkbox which when Checked by the User will set a Session variable.
This Session variable will then be accessed on another page where it will include/disclude some SQL and therefore change the behaviour of a Search.
So i have 2 Pages - Page1 that has the Checkbox on it -
HTML
Quote:
[code]....
1, How do i stop the whole page from executing again when doing a postback ? I only want the Changed Event to run not the whole page
Using Javascript i am validating a textbox data.when validation fails i need to stop executing code behind file.How to proceed.
View 3 Repliesin my controller I have code that validates URL. if not valid I want it to 301 redirect:
[code]....
but this still goes continues on and executes any code after. how would i simply 301 redirect? and NOT continue to process any code after break;?
if I am running a detailsView_Deleting code and a condition is not met and I want to Cancel the delete, how do I code it?
View 4 RepliesI have a WCF service that processes some input arguments and retuns result in approximately 4 minutes. Sometimes the calling client may get request time out before the WCF service answers.
Now, my customer is asking me to stop processing on the service side when the client got timed out. Since, I could not know the status of cleint on the service, I could not stop the process.
I have a page with several asp buttons defined on a Master Page. I only wish these buttons to be activated when they are selected by the mouse click. I have one button on the content of the form, that is the button I want to execute if the user hits enter and it is selected or they use the mouse. So in a nutshell. how do I stop the buttons on the master page from executing unless the user mouses them?
View 1 RepliesI am having a problem with my try catch block runs in the error "dastabase is not available". My problem is the try catch runs and catches the error, but it will not redirect to my error page. The code continues to execute the other subs. I have tried adding: exit, return, response.end. None of them worked.
Imports System.Data
Imports EUC
Imports System.Threading
Imports System.Data.SqlClient
Partial Class mpMain
Inherits System.Web.UI.MasterPage
Dim strSQL As String
Dim objData As clsDataAccess = New clsDataAccess()
Dim ds As New DataSet
Dim t1 As DataTable
Dim intSecurityLevel As String = 0
Dim strUser As String = UCase(Right(HttpContext.Current.User.Identity.Name.ToString(), 4))
Protected Sub ExpandNode(ByVal NodeName As String, ByVal PageName As String)
'More Code
End Sub
Protected Sub ExpandNode2(ByVal NodeNameMain As String, ByVal NodeName As String, ByVal PageName As String)
'More Code
End Sub
Protected Sub Page_Load(ByVal sender As Object, ByVal e As System.EventArgs) Handles Me.Load
If Not (IsPostBack) Then
Try
strSQL = "Select SecurityLevel from tblSecurity where SFID = @SFID order by SecurityLevel"
Dim MyParameters1 As SqlParameter() = { _
New SqlParameter("@SFID", SqlDbType.VarChar) _
}
MyParameters1(0).Value = UCase(Right(HttpContext.Current.User.Identity.Name.ToString(), 4))
ds = objData.SQLExecuteDataset(strSQL, CommandType.Text, MyParameters1)
t1 = ds.Tables(0)
Catch ex As Exception
Dim sendError As New clsExceptionMessage
sendError.sendMessage(ex.Message, Request.Path, strSQL)
Response.Redirect("ErrorMessage.aspx", False)
End Try
End If
End Sub
Protected Sub TreeView1_TreeNodeDataBound(ByVal sender As Object, ByVal e As System.Web.UI.WebControls.TreeNodeEventArgs) Handles TreeView1.TreeNodeDataBound
'More Code
End Sub
Protected Sub TreeView1_DataBound(ByVal sender As Object, ByVal e As System.EventArgs) Handles TreeView1.DataBound
'More Code
End Sub
End Class
I have two user controls and both the user controls refer a same script path:
<script type="text/javascript" src="test.js"></script>
then what happens when the first user controls load then test.js will download in client and when second user control loads then test.js file will download again.
How do I check to see if the JavaScript file is already downloaded so it doesn't have to be downloaded again?
If I include the JavaScript file from the server side:
Page.ClientScript.RegisterClientScriptInclude("test",
Page.ClientScript.GetWebResourceUrl(this.GetType(),
"test.js"));
then how could I make sure it isn't included twice?
OK, this feels like a question that should be easy to answer, but as with so much mixing of asp.net and jQuery, it's a bit of a nightmare.
What I want to do is be fading a div in and out at various times during the client's viewing of my asp.net page; I fade it out using jQuery's fadeTo() before triggering an UpdatePanel update (to indicate that the data there is not fresh) and I want to fade it in again once the UpdatePanel has been updated. I've gotten as far as updating the UpdatePanel in the codebehind, and this results in the div's content changing... but how do I fade the div back in again?
The way I see it, there are 2 ways; register an event handler on page load to detect when the div's content has been changed and fade it back in, or call a function from the asp.net codebehind when I've updated the div to fade it back in.
In the first case, there doesn't seem to be any event triggered by the div's content changing, so I can't seem to do that. If anyone knows how I could get a client event to trigger when I update the div, that would be a nice solution.
In the second case, I thought that this was what ClientScriptManager was for, but it doesn't quite do what I want. I want to be able to register a particular Javascript function with ClientScriptManager and then tell ClientScriptManager to execute it in the client, from my codebehind. You can't seem to do that. ClientScriptManager.RegisterClientScriptBlock() simply inserts some <script> into the HTML output, rather than calling a function. Presumably this would work if I kept registering things like:
<script>fadeBackIn();</script>
because the Javascript would be immediately evaluated and run, but this feels messy, and that feeling is intensified by the fact that I'd have to keep randomly generating a new unique value for the key argument of ClientScriptManager.RegisterClientScriptBlock(), because it's specifically designed to stop this kind of repeated code. However, I'm struggling to see an alternative.
I'd really like something along the lines of:
ClientScriptManager.RegisterClientScriptFunction("fadeBackIn", "function fadeBackIn(){ ... }");
ClientScriptManager.ExecuteClientScriptFunction("fadeBackIn");
I have a asp.net panel that is initially hidden and is shown when a button is clicked. There is javascript inside that panel and it doesn't execute after the panel is set to be visible. I can see that javascript function gets outputted on page but it is not called. What can I do to make it so that function gets called? Here is an example:
<asp:LinkButton id="lbtn" runat="server" Text="show" OnClick="lbtn_Click" />
<asp:UpdatePanel id="upnl" runat="server" UpdateMode="Conditional">
<contenttemplate>
<asp:panel id="pnlContent" runat="server" visible="false">
content initially hidden.
<script>
alert('done!');
</script>
</asp:panel>
</contenttemplate>
<triggers>
<asp:AsyncPostBackTrigger ControlID="lbtn"/>
</triggers>
</asp:UpdatePanel>
Here is what I need to do: I need to execute some server side code after a user clicks on a button, THEN I need to execute some client side code. OnClientClick gets invoked BEFORE the onClick; and what I need is the opposite.
Is there a way to do this? It looks like I will have to execute JS code from the server code.
I was looking the Highlight effect of Jquery's. That effect is really the one i would like to add in my webpage.
By looking at the the source code, i noticed that the effect will be reproduced on user's click of the div.
$("div").click(function () {
$(this).effect("highlight", {}, 3000);
});
In my webpage i have an ImageButton
<asp:ImageButton ID="btnFavorite" runat="server" ImageUrl="~/Images/Favorite.png"/>
I would love to perform the highlight effect to the div, when the user clicks on the image button. Is it possible?
UPDATE: If it is possible, could i use something like "OnClientClick=" of the ImageButton, since the imagebutton controls are added dynamically to the webpage?
I added a Button and a LinkButton to same page and set same properties to both of them. LinkButton works fine but Button's PostBackURL not work after executing javascript (Clicked "OK" in message window). it posted back to same page instead of second page. following is the code:
<asp:Button ID="Button1" runat="server" Text="Button"
PostBackUrl="~/second.aspx"
OnClientClick="return confirm('Switch page?');" />
<asp:LinkButton ID="LinkButton1" runat="server" Text="LinkButton"
PostBackUrl="~/second.aspx"
onclientclick="return confirm('Switch page?');" />
i think The javascript function called by using RegisterStartupScript or RegisterClientScriptBlock executed after the code in the method is executed.I want to execute the javascript function called by RegisterStartupScript or RegisterClientScriptBlock to be executed before the code in buton click method is executed. For that what should i do?
View 5 RepliesSo, I have a MasterPage, in which I have an ImageButton and an UpdatePanel. Inside the UpdatePanel I have a LinkButton.
[Code]....
As you can see, both components are asociated to the same OnClick event, which should open said PDF document in a new window using javascript (Code Behind of the MasterPage):
[Code]....
I build the path using the toolTip of the component that has been clicked,which has the name of the file that should load in the
new window.
When I run the application, and click the ImageButton, the new window opens and the file loads correctly. However, when I click the LinkButton, nothing happens (it should do exactly the same as the ImageButton).
If I set a breakpoint, and debug, when I click the LinkButton, it goes to the LnkRelease1 event (as it should), everything looks fine, but it doesnt open the new window, It doesn't execute the javascript window.open.
I hav button on a page. click on it and it works on local system. when i deploy on server. code seems not working. I receive a 'request failed' and truest level error. method even contains 1 simple stmt of 'exit sub'. it's not happening on other pages.
View 3 RepliesI added a Button and a LinkButton to same page and set same properties to both of them. LinkButton works fine but Button's PostBackURL not work after executing javascript (Clicked "OK" in message window). it posted back to same page instead of second page. following is the code:
<asp:Button ID="Button1" runat="server" Text="Button"
PostBackUrl="~/second.aspx"
OnClientClick="return confirm('Switch page?');" />
<asp:LinkButton ID="LinkButton1" runat="server" Text="LinkButton"
PostBackUrl="~/second.aspx"
onclientclick="return confirm('Switch page?');" />
I have buttion on web page and client side java script ConfirmResetPassword() for confirmation message which return true or false
[Code]....
if (confirm("Are you sure you want to reset password of this user?")) {
return true;
}
return false;
}
}with Telerik AjaxSetting[Code]....
<input type="button" name="ctl00$ContentPlaceHolder1$btnResetPassword" value="Reset Password" onclick="javascript:return ConfirmResetPassword();__doPostBack('ctl00$ContentPlaceHolder1$btnResetPassword','')" id="ctl00_ContentPlaceHolder1_btnResetPassword"
/> ?
I have some code like below in an aspx page:
[code]....
I had thought that returning false would keep my asp.net OnClick even from firing, but it still does. I've confirmed that it is getting to the return false section of code using alerts. Is there anything I can do to stop it from firing using jQuery/javascript?
I am using javascript in my Asp.Net application. In my scenario i am calling two function using javascript in the aspx page. when i call first function i dont want to call second function. I need to stop the second function. I know that the problem is javascipt call all function in the aspx page. How can we achieve in this scenario that when i finished first call the first function after calling second function.
View 2 RepliesI'm using the Telerik RadWindow control in one of my applications. When a user wants to authorize Twitter for the application the window displays the OAuth dialog for Twitter.
However, each time I display the pop-up for Twitter OAuth, or even just the plain Twitter page, the entire browser is redirected.
The control works just fine when the URL is pointed at a site other than Twitter. I'd like to see if I can block that redirect, or if perhaps there's an easier way to accomplish the OAuth confirmation.
I have an ASP.NET page and have a couple of linkbuttons and Iframes. The pages in side of these IFrame take long time to load, I want the user to navigate to another page by clicking one of the linkbuttons. Now, it looks like it is waiting for the the iframes to finish loading when i click on a link button, the page is still trying to load (instead of navigating to different page).
Is there any way I can stop the iframes to load and go to another page?
