Bringing more HTML to Silverlight [HtmlTextBlock improvements]

Techy News Blog » Bringing more HTML to Silverlight [HtmlTextBlock improvements]

Techy News Blog » Bringing more HTML to Silverlight [HtmlTextBlock improvements] — Mon, 24 Sep 2007 21:34:02 GMT

PingBack from http://www.artofbam.com/wordpress/?p=2523

re: Bringing more HTML to Silverlight [HtmlTextBlock improvements]

rbirkby — Tue, 25 Sep 2007 09:30:04 GMT

Inject the HTML into an IFrame in a different security context. This will give you the security you need.

re: Bringing more HTML to Silverlight [HtmlTextBlock improvements]

Delay — Tue, 25 Sep 2007 18:19:01 GMT

rbirkby,

Thanks very much for the suggestion! If you have a pointer to more information about this approach, I'd love to understand the implications a little better. According to my current understanding, moving to an IFRAME might let me use a different security context, but if I can't also turn off JavaScript entirely then I'm concerned the basic vulnerability still exists - even if it's limited to annoying alert dialogs.

On a related note, my concern about searching for "<script>...</script>" and ignoring it is that clever folks might be able to sneak the tags through anyway (ex: "<script >", etc.). I know I could use a Regex to do a pretty good job, but the underlying issue still concerns me. And even if I believed I'd addressed the <script> concern, I'd be worried about something like <img ... onload="..." /> where script runs for an event handler instead.

So if you've got a suggestion that lets me disable script entirely, then I'm definitely interested! :)

Silverlight Cream for September 25, 2007

WynApse — Tue, 25 Sep 2007 21:30:57 GMT

Silverlight Cream for September 25, 2007

re: Bringing more HTML to Silverlight [HtmlTextBlock improvements]

michael.tucker@getronics.com — Tue, 09 Oct 2007 16:03:36 GMT

Thanks a bunch for this great control! It beings much needed HTML functionality back into Silverlight. Any way to get the links to actually fire? Maybe via a HtmlPage.Navigate() call or something?

re: Bringing more HTML to Silverlight [HtmlTextBlock improvements]

Delay — Tue, 09 Oct 2007 20:40:07 GMT

Michael,

I explain why links don't navigate in the third "note" of the initial post. Per your suggestion, .Navigate would be a good way to do the navigation - but the difficulty is in detecting the click of the link instead! :) Basically, there doesn't seem to be a good way to detect a click *on the link itself* at the moment. While it would be possible to detect a click on the HtmlTextBlock, that would only seem to make sense if there were exactly one link present. So for lack of a good way to support this, I chose not to for now. However, if you have a scenario where it makes sense to behave differently, by all means do so! :)

Hello Silverlight - Start Your Silverlight Journey Today!

BradVin's .Net Blog — Wed, 17 Oct 2007 10:19:45 GMT

I think today is the start for great things to come. And why? Because I had my first article published

Continuing support for simple HTML display in Silverlight [HtmlTextBlock sample updated for Silverlight 2 Beta 1!]

Delay's Blog — Mon, 17 Mar 2008 22:48:12 GMT

A few months ago when Silverlight 1.1 Alpha was all the rage, I wrote a sample control that made a best-effort

Again with the support for simple HTML display in Silverlight [HtmlTextBlock sample updated for Silverlight 2 Beta 2!]

Delay's Blog — Wed, 11 Jun 2008 20:15:16 GMT

A customer recently asked about an update to my HtmlTextBlock sample for the newly released Silverlight

My take on simple HTML display in Silverlight [HtmlTextBlock sample updated for Silverlight 2 RTW!]

Delay's Blog — Wed, 12 Nov 2008 09:15:40 GMT

A couple of readers have asked about an update to my long-running HtmlTextBlock sample for Silverlight

A fix for simple HTML display in Silverlight [HtmlTextBlock bug fix for Silverlight 2 RTW!]

Delay's Blog — Wed, 12 Nov 2008 23:16:50 GMT

I updated my HtmlTextBlock sample for RTW last night and got an email from kind reader Ed Silverton this