BackwardCompatibilitySettings.RemovePotentiallyDangerousNavigateUrlDefaultValue Property

Specifies whether to remove potentially dangerous navigate URLs.

Namespace: DevExpress.Web

Assembly: DevExpress.Web.v25.2.dll

NuGet Package: DevExpress.Web

Declaration

C#

[DefaultValue(true)]
public bool RemovePotentiallyDangerousNavigateUrlDefaultValue { get; set; }

VB.NET

<DefaultValue(True)>
Public Property RemovePotentiallyDangerousNavigateUrlDefaultValue As Boolean

Property Value

Type	Default	Description
Boolean	true	true, to remove potentially dangerous navigate Urls; otherwise, false.

Property Paths

You can access this nested property as listed below:

Object Type	Path to RemovePotentiallyDangerousNavigateUrlDefaultValue
ASPxWebControl	.BackwardCompatibility .RemovePotentiallyDangerousNavigateUrlDefaultValue

Remarks

Use the RemovePotentiallyDangerousNavigateUrlDefaultValue property to validate HyperlinkColumn values in grid-based components and help prevent XSS vulnerabilities.

URL validation helps protect your application from cross-site scripting (XSS), server-side request forgery (SSRF), phishing, and similar URL-based attacks. For additional information, see Safe URL Validation.

Note

Note that grid-based controls validate only data source values used in a HyperlinkColumn and ignore the HyperLinkProperties.NavigateUrlFormatString property.

The following code snippet keeps all potentially dangerous navigation URLs in grid-based controls:

Global.asax

void Application_Start(object sender, EventArgs e) {
    ASPxWebControl.BackwardCompatibility.RemovePotentiallyDangerousNavigateUrlDefaultValue = false;
}