Prevent grid executing any html or script after rendering

[Andrew Jang]

Hello,

I was simulating the cross-site script (XSS) attack for the application I was building.

I am entering '<h1>Hello   World!</h1><script>alert('Cross   site scripting attack!');</script>' into DB to simulate the senario.

When I render the text above using Syncfusion's Grid Control, I get something like the following:

Can I prevent Grid control to execute any HTML or Script that's being loaded from the DB?

Thank you,

AJ

[Mani Sankar Durai]

Hi Andrew, 

Thanks for contacting Syncfusion support. 

We have analyzed your query and to prevent from the XSS Attack we have already documented a documentation that can be available from the below link. 

Link: https://help.syncfusion.com/js/xss-security#xss-protection-for-mvc-platform 

https://help.syncfusion.com/js/xss-security 

Please let us know if you need further assistance. 

Regards, 

Manisankar Durai.