Re: DataGrid

Hi, Justin already answered on all questions, so only one comment: Justin Patrin wrote: > On 9/24/06, Chris Boget <chris.boget@wild.net> wrote: >> That's fine. So I try to do the replace in my query. I'll just >> use selectAdd() to select the column, having replaces the CRs with nothing >> and the LFs with '<br/>'. That works, but not how I expected. When the >> datagrid renderer (any of them, actually, not just the XML renderer) gets >> the value of the field, it 'prepares' it in some manner and turns any >> potential entity character into it's html entity representation. >> So my "<br/>"s are turned into "&lt;br/&gt;". > > This is definately correct behavior for HTML and XML renderers. You > don't want to allow HTML injection (XSS attacks). If it is happening > for other renderers (such as text or XLS) then this is a bug. Right, that would be a bug. Chris, can you send a me test script that shows this behaviour? (Or, at least please tell me, how you're using SDG.) Regards, Mark