2017-04-18 07:52:04 +08:00
|
|
|
## Multi-line ASP.Net TextBox spacing changed when using AntiXSSEncoder
|
2017-04-06 04:52:19 +08:00
|
|
|
|
|
|
|
|
### Scope
|
|
|
|
|
Minor
|
|
|
|
|
|
|
|
|
|
### Version Introduced
|
|
|
|
|
4.5
|
|
|
|
|
|
|
|
|
|
### Source Analyzer Status
|
|
|
|
|
Available
|
|
|
|
|
|
|
|
|
|
### Change Description
|
2017-04-21 02:19:05 +08:00
|
|
|
|
|
|
|
|
In .NET Framework 4.0, extra lines were inserted between lines of a multi-line
|
|
|
|
|
text box on postback, if using the
|
|
|
|
|
<xref:System.Web.Security.AntiXss.AntiXssEncoder?displayProperty=name>. In .NET
|
|
|
|
|
Framework 4.5, those extra line breaks are not included, but only if the web app
|
2018-03-01 08:06:28 +08:00
|
|
|
is targeting .NET Framework 4.5
|
2017-04-06 04:52:19 +08:00
|
|
|
|
|
|
|
|
- [x] Quirked
|
|
|
|
|
- [ ] Build-time break
|
|
|
|
|
|
|
|
|
|
### Recommended Action
|
2017-04-21 02:19:05 +08:00
|
|
|
|
2018-03-01 08:06:28 +08:00
|
|
|
Be aware that 4.0 web apps retargeted to .NET Framework 4.5 may have multi-line text boxes
|
2017-04-21 02:19:05 +08:00
|
|
|
improved to no longer insert extra line breaks. If this is not desirable, the
|
|
|
|
|
app can have the old behavior when running on .NET Framework 4.5 by targeting
|
|
|
|
|
the .NET Framework 4.0.
|
2017-04-06 04:52:19 +08:00
|
|
|
|
|
|
|
|
### Affected APIs
|
|
|
|
|
* Not detectable via API analysis
|
|
|
|
|
|
|
|
|
|
### Category
|
|
|
|
|
ASP.NET
|
|
|
|
|
|
|
|
|
|
[More information](http://connect.microsoft.com/VisualStudio/feedback/details/748052/textbox-with-multiline-textmode-adds-additional-linebreak-to-the-output)
|
|
|
|
|
|
|
|
|
|
<!--
|
|
|
|
|
### Notes
|
|
|
|
|
Encoder is set in a config file. See bug repro for example.
|
|
|
|
|
-->
|
2017-04-18 07:52:04 +08:00
|
|
|
|
|
|
|
|
<!-- breaking change id: 92 -->
|
