OK, the problem is quite simple. I’ve successfully set up a html editor extender in my webforms 4 app. Everything works ok.
Reading the tuts further and finding a part, when they STRONGLY recommend to use a sanitizer, that ships with the ajaxcontroltoolkit 4. Great, I tell to myself. Set it up following the tutorial, everything works.
Well, almost everything – the formatting is gone after the submit. It seems the sanitizer strips EVERY tag, resulting in a situation, when my beloved html editor extender suddenly becomes a very standard textarea with fancy buttons.
So, I tried to disable sanitizer and check the output, if it is really that dangerous after inputting malicious script. The output was a standard html encoded text.
My question is – do I really need that so recommended sanitizer? Did I miss something?
If yes, please, explain why do we need it and how to get it work.
P.S.: I believe I don’t have to include the source code, because it is pretty much following the official tutorial on how to get it work. If you think different, tell me and I’ll edit the post to include relevant parts here…
Edit:
Is the question not clear or why it has only 17 views? Give me a comment so I can improve it then…
Seems this article describes pretty much the behavior I’m experiencing…
http://wpl.codeplex.com/workitem/17246
In other words, some weird bug and the only fix so far is to wait for the update/patch of the library… Or revert to the previous version.