HtmlSettingsAttribute.AllowScripts Property

SECURITY-RELATED CONSIDERATIONS

For security reasons, the AllowScripts option must be disabled.

Specifies whether the Editor’s HTML markup can contain scripts.

Namespace: DevExpress.Web.Mvc

Assembly: DevExpress.Web.Mvc5.v25.2.dll

NuGet Package: DevExpress.Web.Mvc5

Declaration

C#

public bool AllowScripts { get; set; }

VB.NET

Public Property AllowScripts As Boolean

Property Value

Type	Description
Boolean	true if scripts are allowed within the editor’s content; false if scripts are automatically removed from the editor’s HTML markup.

Remarks

The AllowScripts property specifies whether the HTML Editor preserves potentially unsafe content. When this property is set to false, the HTML Editor removes all potentially harmful markup from resulting HTML (<script> elements, client-side event handlers, and attributes that contain script code).