problem rendering user entered content

A critical vulnerability was discovered in React Server Components (Next.js). Our systems remain protected but we advise to update packages to newest version. Learn More.

AI OnAI Off

Home / Forums / Developers (Main Products) Forum / CMS 7.5 - 11 /

problem rendering user entered content

M Mimar

Vote:

Hi,

I was trying to create a simple page with a content editable part, but when I add some content to it and click publish, the page renders <>h1>h1> instead of <>h1>Some entered texth1>.

When I go back to the CMS and click on the rich text editor, I can see Some entered text there, so I'm sure there is no information loss, the data is definitely saved.

I'm running Visual Studio Community 2015 on Windows 10 and Episerver 10.10

Here is my code:

------------ ApplePage.cs ------------

using System.ComponentModel.DataAnnotations;
using EPiServer.Core;
using EPiServer.DataAbstraction;
using EPiServer.DataAnnotations;
 
namespace Episerver10.Models.Pages
{
    [ContentType(DisplayName = "ArticlePage", GUID = "a8fe8485-587d-4880-b485-a52430ea55de",
        Description = "Basic page type for creating apple articles.")]
    public class ApplePage : PageData
    {
        [CultureSpecific]
        [Display(
            Name = "Main body",
            Description = "The main body editor area lets you insert text and images into a page.",
            GroupName = SystemTabNames.Content,
            Order = 10)]
        public virtual XhtmlString MainBody { get; set; }
    }
}

------------ ApplePageController.cs ------------

using System.Web.Mvc;
using Episerver10.Models.Pages;
using EPiServer.Framework.DataAnnotations;
using EPiServer.Web.Mvc;
 
namespace Episerver10.Controllers
{
    [TemplateDescriptor(Default = true)]
    public class ApplePageController : PageController<>ApplePage>
    {
        public ActionResult Index(ApplePage page)
        {
            return View(page);
        }
    }
}

------------ Index.cshtml ------------

@model Episerver10.Models.Pages.ApplePage
 
@{
    Layout = null;
}
 
<>h1>@Html.PropertyFor(m => m.MainBody)h1>

---------------------------------------

What am I missing here?

Thanks in advance for your help.

#180435

Jul 10, 2017 14:30

Johan Petersson

Vote:

Hi,

I think the content is acutally rendered. But since it's XhtmlString it might not show up "correctly" in F12 tools since not all elements are valid to place inside an H1 tag. What happens if you render MainBody outside the H1?

I wouldn't recommend allowing formatting (XhtmlString) inside a header.

#180436

Jul 10, 2017 15:51

Please login to post a reply