Skip to main content

ReportViewer.AllowURLsWithJSContent Property

Specifies whether or not the execution of the JavaScript code placed in URLs is allowed.

Namespace: DevExpress.XtraReports.Web

Assembly: DevExpress.XtraReports.v23.2.Web.WebForms.dll

NuGet Package: DevExpress.Web.Reporting

Declaration

[DefaultValue(false)]
[SRCategory(ReportStringId.CatBehavior)]
public bool AllowURLsWithJSContent { get; set; }

Property Value

Type Default Description
Boolean false

true to allow the execution of the JavaScript code placed in URLs; otherwise, false.

Remarks

By default, the execution of the JavaScript code placed in URLs is prohibited, since this behavior creates the possibility of a phishing attack and makes executing queries from users viewing reports possible.

Enable the AllowURLsWithJSContent setting when you need to insert JavaScript code into the URL.

See Also