BackwardCompatibilitySettings.RemovePotentiallyDangerousNavigateUrlDefaultValue Property
Specifies whether to remove potentially dangerous navigate URLs.
Namespace: DevExpress.Web
Assembly: DevExpress.Web.v20.2.dll
NuGet Package: DevExpress.Web
Declaration
Property Value
| Type | Description |
|---|---|
| Boolean | true, to remove potentially dangerous navigate Urls; otherwise, false. |
Property Paths
You can access this nested property as listed below:
Show 302 property paths
| Library | Object Type | Path to RemovePotentiallyDangerousNavigateUrlDefaultValue |
|---|---|---|
| ASP.NET Controls and MVC Extensions | ASPxAutoCompleteBoxBase |
|
| ASPxBinaryImage |
|
|
| ASPxButton |
|
|
| ASPxButtonEdit |
|
|
| ASPxButtonEditBase |
|
|
| ASPxCalendar |
|
|
| ASPxCallback |
|
|
| ASPxCallbackPanel |
|
|
| ASPxCaptcha |
|
|
| ASPxCardView |
|
|
| ASPxCheckBox |
|
|
| ASPxCheckBoxList |
|
|
| ASPxCheckListBase |
|
|
| ASPxCloudControl |
|
|
| ASPxCollapsiblePanel |
|
|
| ASPxColorEdit |
|
|
| ASPxComboBox |
|
|
| ASPxDataView |
|
|
| ASPxDataViewBase |
|
|
| ASPxDataWebControl |
|
|
| ASPxDataWebControlBase |
|
|
| ASPxDateEdit |
|
|
| ASPxDiagram |
|
|
| ASPxDockManager |
|
|
| ASPxDockPanel |
|
|
| ASPxDockZone |
|
|
| ASPxDropDownEdit |
|
|
| ASPxDropDownEditBase |
|
|
| ASPxEdit |
|
|
| ASPxEditBase |
|
|
| ASPxFileManager |
|
|
| ASPxFilterControl |
|
|
| ASPxFilterControlBase |
|
|
| ASPxFloatingActionButton |
|
|
| ASPxFormLayout |
|
|
| ASPxGantt |
|
|
| ASPxGaugeControl |
|
|
| ASPxGlobalEvents |
|
|
| ASPxGridBase |
|
|
| ASPxGridLookup |
|
|
| ASPxGridView |
|
|
| ASPxHeadline |
|
|
| ASPxHiddenField |
|
|
| ASPxHierarchicalDataWebControl |
|
|
| ASPxHint |
|
|
| ASPxHtmlEditor |
|
|
| ASPxHtmlEditorRoundPanel |
|
|
| ASPxHtmlEditorUploadControl |
|
|
| HtmlEditorFileManager |
|
|
| ASPxHyperLink |
|
|
| ASPxImage |
|
|
| ASPxImageBase |
|
|
| ASPxImageGallery |
|
|
| ASPxImageSlider |
|
|
| ASPxImageSliderBase |
|
|
| ASPxImageZoom |
|
|
| ASPxImageZoomNavigator |
|
|
| ASPxLabel |
|
|
| ASPxListBox |
|
|
| ASPxListEdit |
|
|
| ASPxLoadingPanel |
|
|
| ASPxMemo |
|
|
| ASPxMenu |
|
|
| ASPxMenuBase |
|
|
| ASPxNavBar |
|
|
| ASPxNewsControl |
|
|
| ASPxObjectContainer |
|
|
| ASPxPageControl |
|
|
| ASPxPager |
|
|
| ASPxPagerBase |
|
|
| ASPxPanel |
|
|
| ASPxPanelBase |
|
|
| ASPxPanelContainerBase |
|
|
| ASPxPivotCustomizationControl |
|
|
| ASPxPivotGrid |
|
|
| ASPxPivotGridPager |
|
|
| ASPxPivotGridPopupMenu |
|
|
| PivotGridDataAreaPopup |
|
|
| ASPxPopupControl |
|
|
| ASPxPopupControlBase |
|
|
| ASPxPopupMenu |
|
|
| ASPxProgressBar |
|
|
| ASPxProgressBarBase |
|
|
| ASPxPureTextBoxBase |
|
|
| ASPxRadioButton |
|
|
| ASPxRadioButtonList |
|
|
| ASPxRatingControl |
|
|
| ASPxResourceManagerBase |
|
|
| ASPxRibbon |
|
|
| ASPxRichEdit |
|
|
| RichEditFileManager |
|
|
| RichEditFolderManager |
|
|
| ASPxRoundPanel |
|
|
| ASPxDateNavigator |
|
|
| ASPxResourceNavigator |
|
|
| ASPxScheduler |
|
|
| ASPxSchedulerDataWebControlBase |
|
|
| ASPxSchedulerPopupForm |
|
|
| ASPxSchedulerPopupMenu |
|
|
| ASPxSchedulerRelatedControl |
|
|
| ASPxSchedulerRelatedControlBase |
|
|
| ASPxSchedulerStorageControl |
|
|
| ASPxTimeZoneEdit |
|
|
| ASPxViewNavigator |
|
|
| ASPxViewSelector |
|
|
| ASPxViewVisibleInterval |
|
|
| ASPxSchedulerStatusInfo |
|
|
| DailyRecurrenceControl |
|
|
| HourlyRecurrenceControl |
|
|
| MonthlyRecurrenceControl |
|
|
| WeeklyRecurrenceControl |
|
|
| YearlyRecurrenceControl |
|
|
| AppointmentEditDialogLayout |
|
|
| GotoDateDialogLayout |
|
|
| RecurrentAppointmentDeleteDialogLayout |
|
|
| RecurrentAppointmentEditDialogLayout |
|
|
| ReminderDialogLayout |
|
|
| ASPxSchedulerControlPrintAdapter |
|
|
| ASPxSchedulerPrintAdapterBase |
|
|
| ASPxSchedulerStoragePrintAdapter |
|
|
| ASPxScriptManager |
|
|
| ASPxSiteMapControl |
|
|
| ASPxSiteMapControlBase |
|
|
| ASPxSpellChecker |
|
|
| ASPxSpinEdit |
|
|
| ASPxSpinEditBase |
|
|
| ASPxSplitter |
|
|
| ASPxSpreadsheet |
|
|
| ASPxStaticEdit |
|
|
| ASPxStyleSheetManager |
|
|
| ASPxTabControl |
|
|
| ASPxTabControlBase |
|
|
| ASPxTextBox |
|
|
| ASPxTextBoxBase |
|
|
| ASPxTextEdit |
|
|
| ASPxTimeEdit |
|
|
| ASPxTimer |
|
|
| ASPxTitleIndex |
|
|
| ASPxTokenBox |
|
|
| ASPxTrackBar |
|
|
| ASPxTreeList |
|
|
| ASPxTreeListTemplateReplacement |
|
|
| ASPxTreeView |
|
|
| ASPxUploadControl |
|
|
| ASPxValidationSummary |
|
|
| ASPxVerticalGrid |
|
|
| ASPxWebClientUIControl |
|
|
| ASPxWebComponent |
|
|
| ASPxWebControl |
|
|
| GridViewContextMenu |
|
|
| ASPxChartDesigner |
|
|
| WebChartControl |
|
|
| ASP.NET Bootstrap Controls | BootstrapAccordion |
|
| BootstrapBinaryImage |
|
|
| BootstrapButton |
|
|
| BootstrapButtonEdit |
|
|
| BootstrapCalendar |
|
|
| BootstrapCallbackPanel |
|
|
| BootstrapCardView |
|
|
| BootstrapChart |
|
|
| BootstrapChartBase |
|
|
| BootstrapCheckBox |
|
|
| BootstrapCheckBoxList |
|
|
| BootstrapColorEdit |
|
|
| BootstrapComboBox |
|
|
| BootstrapCoordinateSystemChart |
|
|
| BootstrapDateEdit |
|
|
| BootstrapDropDownEdit |
|
|
| BootstrapFileManager |
|
|
| BootstrapFloatingActionButton |
|
|
| BootstrapFormLayout |
|
|
| BootstrapGridView |
|
|
| BootstrapHyperLink |
|
|
| BootstrapImage |
|
|
| BootstrapListBox |
|
|
| BootstrapMemo |
|
|
| BootstrapMenu |
|
|
| BootstrapMenuBase |
|
|
| BootstrapPageControl |
|
|
| BootstrapPager |
|
|
| BootstrapPieChart |
|
|
| BootstrapPolarChart |
|
|
| BootstrapPopupControl |
|
|
| BootstrapPopupMenu |
|
|
| BootstrapProgressBar |
|
|
| BootstrapRadioButton |
|
|
| BootstrapRadioButtonList |
|
|
| BootstrapRangeSelector |
|
|
| BootstrapRibbon |
|
|
| BootstrapRichEdit |
|
|
| BootstrapScheduler |
|
|
| BootstrapSchedulerDateNavigator |
|
|
| BootstrapSchedulerPopupMenu |
|
|
| BootstrapSchedulerResourceNavigator |
|
|
| BootstrapSchedulerTimeZoneEdit |
|
|
| BootstrapSchedulerViewNavigator |
|
|
| BootstrapSchedulerViewSelector |
|
|
| BootstrapSchedulerViewVisibleInterval |
|
|
| BootstrapSparkline |
|
|
| BootstrapSpinEdit |
|
|
| BootstrapSpreadsheet |
|
|
| BootstrapTabControl |
|
|
| BootstrapTagBox |
|
|
| BootstrapTextBox |
|
|
| BootstrapTimeEdit |
|
|
| BootstrapToolbar |
|
|
| BootstrapTreeView |
|
|
| BootstrapUploadControl |
|
|
| BootstrapWebClientUIWidget |
|
|
| BootstrapWebClientUIWidgetEx |
|
|
| Reporting | ASPxDocumentViewer |
|
| ASPxQueryBuilder |
|
|
| ASPxReportDesigner |
|
|
| ASPxWebDocumentViewer |
|
|
| ReportDocumentMap |
|
|
| ReportParametersPanel |
|
|
| ReportToolbar |
|
|
| ReportViewer |
|
|
| Dashboard | ASPxDashboard |
|
| MVCxDashboard |
|
|
| eXpressApp Framework | MapViewer |
|
| MapViewerBase |
|
|
| VectorMapViewer |
|
|
| ASP.NET MVC Extensions | MVCxBinaryImage |
|
| MVCxButton |
|
|
| MVCxButtonEdit |
|
|
| MVCxCalendar |
|
|
| MVCxCallbackPanel |
|
|
| MVCxCaptcha |
|
|
| MVCxCardView |
|
|
| MVCxChartControl |
|
|
| MVCxCheckBox |
|
|
| MVCxCheckBoxList |
|
|
| MVCxColorEdit |
|
|
| MVCxComboBox |
|
|
| MVCxDataView |
|
|
| MVCxDateEdit |
|
|
| MVCxDateNavigator |
|
|
| MVCxDiagram |
|
|
| MVCxDockManager |
|
|
| MVCxDockPanel |
|
|
| MVCxDockZone |
|
|
| MVCxDocumentViewer |
|
|
| MVCxDropDownEdit |
|
|
| MVCxFileManager |
|
|
| MVCxFilterControl |
|
|
| MVCxFloatingActionButton |
|
|
| MVCxFormLayout |
|
|
| MVCxGantt |
|
|
| MVCxGridLookup |
|
|
| MVCxGridView |
|
|
| MVCxGridViewContextMenu |
|
|
| MVCxHint |
|
|
| MVCxHtmlEditor |
|
|
| MVCxHtmlEditorSpellChecker |
|
|
| MVCxHyperLink |
|
|
| MVCxImage |
|
|
| MVCxImageGallery |
|
|
| MVCxImageSlider |
|
|
| MVCxImageZoom |
|
|
| MVCxImageZoomNavigator |
|
|
| MVCxLabel |
|
|
| MVCxListBox |
|
|
| MVCxLoadingPanel |
|
|
| MVCxMemo |
|
|
| MVCxMenu |
|
|
| MVCxNavBar |
|
|
| MVCxPageControl |
|
|
| MVCxPanel |
|
|
| MVCxPivotGrid |
|
|
| MVCxPopupControl |
|
|
| MVCxPopupMenu |
|
|
| MVCxProgressBar |
|
|
| MVCxQueryBuilder |
|
|
| MVCxRadioButton |
|
|
| MVCxRadioButtonList |
|
|
| MVCxRatingControl |
|
|
| MVCxReportDesigner |
|
|
| MVCxReportToolbar |
|
|
| MVCxReportViewer |
|
|
| MVCxRibbon |
|
|
| MVCxRichEdit |
|
|
| MVCxRoundPanel |
|
|
| MVCxScheduler |
|
|
| MVCxSchedulerStorageControl |
|
|
| MVCxSpellChecker |
|
|
| MVCxSpinEdit |
|
|
| MVCxSplitter |
|
|
| MVCxSpreadsheet |
|
|
| MVCxTabControl |
|
|
| MVCxTextBox |
|
|
| MVCxTimeEdit |
|
|
| MVCxTimeZoneEdit |
|
|
| MVCxTokenBox |
|
|
| MVCxTrackBar |
|
|
| MVCxTreeList |
|
|
| MVCxTreeView |
|
|
| MVCxUploadControl |
|
|
| MVCxValidationEdit |
|
|
| MVCxValidationSummary |
|
|
| MVCxVerticalGrid |
|
|
| MVCxWebDocumentViewer |
|
Remarks
Use the RemovePotentiallyDangerousNavigateUrlDefaultValue property to validate the grid-based controls’ HyperlinkColumn values to prevent XSS vulnerability.
A secure URL starts with the “http:” or “https:” or doesn’t contain the ‘:’ symbol (relative URLs). Setting the RemovePotentiallyDangerousNavigateUrlDefaultValue property to true removes all potentially dangerous URLs from the <a> HTML element so it is rendered without HREF attribute.
Note
Note that grid-based controls validate only data source values used in the HyperlinkColumn column and ignore the HyperLinkProperties.NavigateUrlFormatString property.
Global.asax:
void Application_Start(object sender, EventArgs e) {
ASPxWebControl.BackwardCompatibility.RemovePotentiallyDangerousNavigateUrlDefaultValue = true;
}
See Also