Skip to main content

HtmlEditorHtmlEditingSettings.AllowScripts Property

SECURITY-RELATED CONSIDERATIONS

For security reasons, the AllowScripts option must be disabled.

Specifies whether the Editor’s HTML markup can contain scripts.

Namespace: DevExpress.Web.ASPxHtmlEditor

Assembly: DevExpress.Web.ASPxHtmlEditor.v26.1.dll

Declaration

[DefaultValue(false)]
public bool AllowScripts { get; set; }

Property Value

Type Default Description
Boolean false

true if scripts are allowed within Editor content; false if scripts are automatically removed from HTML markup.

Remarks

The AllowScripts property specifies whether the HTML Editor preserves potentially unsafe content. When this property is set to false, the HTML Editor removes all potentially harmful markup from resulting HTML (<script> elements, client-side event handlers, and attributes that contain script code).

See Also