Check out the new DevExpress HTML5 Pivot Grid widget that's coming out in the DevExtreme v15.1 release:

The new HTML5 Pivot Grid allows you to create a pivot table for multidimensional data analysis.

The DevExpress HTML5 Pivot Grid supports data provided by OLAP services (MS SQL Server Analysis Services), and connects to any JSON data.

By using the capabilities built into the Pivot Grid, large data sets can be summarized and represented in a cross-tabular format – and can be sorted and filtered as necessary.

And the Pivot Grid ships with numerous run-time customization options that your end-users can freely change it's layout and data perspective based on their specific business requirements.

Features

We took our knowledge of designing powerful Pivot Grid controls for other platforms to bring you the most compelling and useful features in our new HTML5 Pivot Grid.

Summaries & more:

The new Pivot Grid displays accurate summaries for multidimensional data, with built-in features like:

• Horizontal and vertical scrolling with fixed headers
• Showing Totals and Grand Totals
• Expanding/collapsing all header items by level
• Sorting by value, caption or summary

Client-side calculations

And it's a true client-side control. All calculations are done on the client-side when you bind from an array, OData, or custom remote sources. It gives support for:
- Built-in summary types (count, sum, avg, min, max) and custom summary support
- Group intervals

Power users

And with the built-in 'Field-Chooser' dialog, your end-users can customize and become a power-user of the Pivot Grid widget. With the Field Chooser dialog you can:
- Use drag-and-drop to configure column, row, and data fields
- Change Sort Order
- Filter using the pop-up dialog

Standalone Field Chooser

The built-in popup Field Chooser dialog allows your end-user to customize the pivot grid:

However, the Field Chooser can also be displayed along side the Pivot Grid instead of displaying it within the pivot grid (as a pop-up dialog).

Large data support

The Pivot Grid easily handles larges amounts of data. However, what if you've got millions of rows of data? Then you can use the OLAP/XMLA support that's built-in to the Pivot Grid.

This allows your Pivot Grid to work seamlessly when it connects to an OLAP cube using XMLA because the calculations are done on the server side.

Charts integration

The Pivot Grid works great with DevExtreme Charts too. You can connect the two together so that your data can also be visualized in a chart form:

Right To Left

There's built-in RTL (right-to-left) support using a single property.

Mobile touch & desktop browsers

And like all the other DevExtreme widgets, the new Pivot Grid widget also supports touch on mobile devices while also working great on desktop browsers.

AngularJS, jQuery, KnockoutJS, etc.

The new Scheduler widget has support for AngularJS (directive), jQuery, and KnockoutJS. In fact, all DevExtreme widgets provide support for the popular JS frameworks mentioned previously. And you can bind to local or remote data.

Register for v15.1 webinar

To see all the new features coming out for the v15.1 release, sign up for the "What's New for DevExtreme (v15.1)":

Click here to register

I'm preparing to do a fantastic presentation and I hope to see you in the webinar.

In the 15.1 release, the DevExpress ASP.NET controls provide you even more responsive and adaptive features.

We added major features for responsive behavior from out ASP.NET controls in the last v14.2 release. And now we're continuing to improve our ASP.NET controls to get the most reach in a world where browser sizes and devices is constantly changing.

Check out the two ASP.NET controls that have been enhanced for responsive/adaptive behavior:

Menu

The DevExpress ASP.NET Menu control can automatically resize or hide its items when the browser window is resized.

The menu control can hide items from the main menu and show them in a special popup menu if there is no space to show all the items in the main menu. You can even specify which menu items take priority and which items will be hidden. To enable this feature simply set the EnableAdaptivity property to true.

FormLayout

The DevExpress ASP.NET Form Layout (ASPxFormLayout) control allows you to build adaptive edit forms with ease. The Form Layout can collapse its content from several columns to a single a column. - It can also rearrange its editors to one column and move their caption, help text, and validation message above or under depending on the resolution.

The Form Layout adaptivity settings can be accessed by the SettingsAdaptivity property. To enable this functionality, set the AdaptivityMode property to SingleColumnWindowLimit.

When adaptive mode is enabled, the Form Layout control automatically changes its layout when the browser window is resized. When the browser window inner width is less than or equal to the value specified by the SwitchToSingleColumnAtWindowInnerWidth property, control content is reordered into one column. The editor captions are displayed above or below the editor (based on the initial position).

In this animation above, the Form Layout control displays its editors in a single column when the browser window width is less than 800 pixels.

Register for v15.1 webinar

To see all the new features coming out for the v15.1 release, sign up for the "What's New for ASP.NET and MVC (v15.1)":

Click here to register

Thanks!

Check out the new DevExpress ASP.NET Card View control, providing a Microsoft Outlook-inspired Contacts View with integrated data shaping and editing capabilities:

It's part of the v15.1 release and it's packed with great features.

Card view

A card view interface provides the end-user with information on cards rather than just rows and columns of a grid table. If you've used Microsoft Outlook's Contact interface then you've experienced card view:

Based on Grid and Data View

The new ASP.NET Card View is based on the powerful DevExpress ASP.NET GridView and DataView controls. So it shares many of their great feature set and ability to databind so just about any data source.

Features

This community technology preview of the DevExpress ASP.NET Card View control includes these features:

• Server mode
• Data sorting
• Data filtering (the search panel, header filter, filter control)
• Data editing ( two edit modes are provided)
• Templates
• Card focusing
• Card selection
• Built-in pager
• Endless paging
• Responsive UI

The new ASP.NET Card View control is also responsive! This means that once you set the Width to 100%, then the Card View control will resize with your browser. And the items inside the Card View control will expand and collapse as necessary.

Preview version (CTP for v15.1)

We're releasing it as a community technology preview. Why? Because it's a slick new control that we're still perfecting.

However, the new ASP.NET Card View control has enough of a feature set that we'd love for you to test drive and give us your feedback.

Register for v15.1 webinar

To see all the new features coming out for the v15.1 release, sign up for the "What's New for ASP.NET and MVC (v15.1)":

Click here to register

Thanks!

In the v15.1 release, we've added editing functionality to the DevExpress ASP.NET Binary Image control. This powerful new feature provides your end-users with a fast and easy way to upload images directly to the web server:

The Binary Image control displays images from a binary stream.

ASP.NET GridView Benefits

The Binary Image control is a standalone control. And the DevExpress ASP.NET GridView uses this control when you have a BinaryImageColumn type. This means that your end-users will get the same benefits image editing capabilities in the GridView:

New EditingSettings Property

By default, the new edit functionality is disabled. To use the new edit feature, simply set the EditingSettings.Enabled property to true and your end-users can edit (upload) images.

Upload control

Btw, the new edit feature uses the versatile DevExpress ASP.NET Upload control internally to provide the upload functionality! Reuse, ftw!

Register for v15.1 webinar

To see all the new features coming out for the v15.1 release, sign up for the "What's New for ASP.NET and MVC (v15.1)":

Click here to register

Thanks!

In the v15.1 release, the DevExpress ASP.NET Spreadsheet control is getting some major new features:

Features

Here's the list of v15.1 DevExpress ASP.NET Spreadsheet enhancements:

Improved Copy/Paste

In previous versions, copy/paste operations only worked within a single Spreadsheet document (the Spreadsheet clipboard was used instead of the computer clipboard). End-users can now use copy/cut/paste keyboard shortcuts (Ctrl+C, Ctrl+X, Ctrl+V) to transfer data between multiple Spreadsheet documents and even between the Spreadsheet and an external application (Excel, Word, etc.).

Support for Streams and Byte Arrays (Open/Save Documents)

A new server-side API (methods and events) has been implemented so you can store, open and save documents both in the file system and in other locations (such as a database).

Worksheet Content Selection

A click on the top-left header cell now selects the contents of entire worksheet cells.

Proportional Resizing of Images and Charts

End-users can resize images and charts proportionally by dragging their corners (chart resizing requires holding down the Shift key). Resizing operations can be canceled by pressing the Esc key.

Register for v15.1 webinar

To see all the new features coming out for the v15.1 release, sign up for the "What's New for ASP.NET and MVC (v15.1)":

Click here to register

Thanks.

We've added three major enhancements to our excellent client-side HTML5 Data Grid widget:

Excel Export

This was the most requested feature of the DevExtreme Data Grid widget and I'm happy to announce that it's available in the v15.1 release!

You can now export data displayed in the HTML5/JS Data Grid widget to an Excel document (for all or only selected rows). Data is exported as it is displayed inside the grid - with sorting, filtering and grouping applied - with numbers, dates and formatting maintained.

The exporting is done on the client-side too. To learn more, join me on the webinar listed below.

Fixed Columns

The DevExpress HTML5 Data Grid allows you to anchor columns to the left or rightmost grid edge. When anchored, columns are not horizontally scrolled with the grid.

Header Filter

With this release, you can filter grid data against any column by choosing unique column values from a drop-down list (using the column header’s filter button).

Register for v15.1 webinar

To see all the new features coming out for the v15.1 release, sign up for the "What's New for DevExtreme (v15.1)":

Click here to register

I'm preparing to do a fantastic presentation and I hope to see you in the webinar.

Thanks!

With the v15.1 release, the DevExtreme HTML 5/JS widgets now include support for the WAI-ARIA standard (and support screen readers).

WAI-ARIA standard

To understand what WAI-ARIA is, I highly recommend reading this excellent introduction by the W3.org: WAI-ARIA Overview

I've included a short paragraph here:

WAI-ARIA, the Accessible Rich Internet Applications Suite, defines a way to make Web content and Web applications more accessible to people with disabilities. It especially helps with dynamic content and advanced user interface controls developed with Ajax, HTML, JavaScript, and related technologies. Currently certain functionality used in Web sites is not available to some users with disabilities, especially people who rely on screen readers and people who cannot use a mouse. WAI-ARIA addresses these accessibility challenges, for example, by defining new ways for functionality to be provided to assistive technology. With WAI-ARIA, developers can make advanced Web applications accessible and usable to people with disabilities. -WAI-ARIA Overview, w3.org

Technical solution

DevExtreme widgets supports WAI-ARIA standard with the v15.1 release. WAI-ARIA is a web oriented standard, developed in W3C for making web applications accessible. It solves the problem by using special html-attributes in DOM elements which give assistive technologies ability to interact with the page content.

DevExtreme widgets set aria-attributes and change them according to the current control's state.

With DevExtreme v15.1, the end-user can:

• Interact with widgets without a monitor using the tested screen reader application
• Interact with widgets without a mouse using our accessible keyboard navigation

Supported Screen Readers

DevExtreme v15.1 supports the NVDA open source screen reader - one of most popular among open source assistive technologies. However, you may use any other assistive technology supporting the WAI-ARIA standard.

Register for v15.1 webinar

To see all the new features coming out for the v15.1 release, sign up for the "What's New for DevExtreme (v15.1)":

Click here to register

I'm preparing to do a fantastic presentation and I hope to see you in the webinar.

Now that the DevExpress v15.1 release is available, I wanted to highlight 4 smaller enhancements that you may not have seen:

Minor Enhancements

1. GridView - Provide the capability to use the Search Panel in Custom Data Binding mode.

A new SearchPanel property has been added to the GridViewModel class.

The property's type (DevExpress.Web.Mvc.GridViewSearchPanelState) exposes the following properties:

• ColumnNames
• Filter
• GroupOperator

(more info)

2. PivotGrid - Provide a way to customize control settings before export.

The new MVCxPivotGridExportSettings.BeforeExport property allows you to customize settings before exporting.

(more info)

3. DevexpressEditorsModelBinder - Support binding multiple values selected in MVC Extension editors to a Model's collection-type property.

DevExpressEditorsBinder now supports binding to complex collection-type models and model properties, in a similar manner as the default model binder (DefaultModelBinder) does.

(more info)

4. Binary Image Column Editing

The DevExpress MVC BinaryImage extension can now provides editing features. It has a built-in upload functionality that allows users to upload an image direct to the server and set the BinaryImage column. And you can use it within the DevExpress MVC GridView extension. Simply set up your BinaryImage column and choose your settings:

    settings.Columns.Add(c => {
        c.FieldName = "Photo";
        c.ColumnType = MVCxGridViewColumnType.BinaryImage;var properties = (MVCxBinaryImageEditProperties)c.PropertiesEdit;
        properties.ImageHeight = 170;
        properties.ImageWidth = 160;
        properties.ImageSizeMode = ImageSizeMode.FitProportional;
        properties.CallbackRouteValues = new { Action = "BinaryImageColumnPhotoUpdate", Controller = "Editing" };
        properties.EditingSettings.Enabled = true;
        properties.EditingSettings.UploadSettings.UploadValidationSettings.MaxFileSize = 4194304;
    });

Check out this onlie demo to learn more.

What's new in v15.1

The DevExpress ASP.NET MVC extensions have gotten some major new upgrades and enhancements in the v15.1 release. Check out the full list here:

http://devexpress.com/new

And be sure to check out the latest addition to our MVC suite:

New Rich Text Editor

V15.1 includes our newest MVC Extension – the DevExpress Rich Text Editor for MVC. Like its WebForms counterpart, this extension allows you to introduce powerful word processing capabilities to your next MVC app. The Rich Editor ships with a comprehensive set of text formatting options and a rich collection of Microsoft Word-inspired features.

DevExpress MVC Rich Text Editor - Online demo

Thanks!

In the "What's new for ASP.NET v15.1" webinar, I showed the mail merge like features of the new DevExpress ASP.NET Rich Text Editor. Click the image below to see the webinar video:

In this blog post, I'll explain some more details about this great new functionality.

Fields Support

In the DevExpress ASP.NET Rich Text Editor (ASPxRichEdit), document fields are special placeholders for non-static data that might change (be updated on field update). These placeholders are replaced with actual data when the document is rendered for display or print. Using fields, you can automate different aspects of your document, such as auto page numbering, inserting actual dates and times, etc. The default Mail Merge ribbon tab can be used to work with fields (create, update, switch between field display modes). There are six field codes:

• DATE - Inserts the current date and time.
• TIME - Inserts the current time.
• HYPERLINK - Enables you to navigate to another location or to a bookmark.
• NUMPAGES - Inserts the total number of pages.
• PAGE - Inserts the number of the page containing the field.
• DOCVARIABLE - Enables you to programmatically insert complex content when this field is updated.

Docvariable

The DevExpress ASP.NET Rich Editor (ASPxRichEdit) enables you to store custom information in the document using document variables. To insert a document variable in the document, use the DOCVARIABLE field code.

The DOCVARIABLE field code has the following syntax:

{ DOCVARIABLE "variable name" "argument1" "argument 2"... }

Argument1, Argument2, etc. are optional parameters.

How to insert a DOCVARIABLE field

To add the Docvariable field code to your RTF doc:

1. Press Ctrl+F9 to insert a new field
2. write the DOCVARIABLE keyword, space and a name of a variable

Calculate the field value

To calculate a value of this field in ASPxRichEdit:

First, override the CalculateDocumentVariable event.

In the handler, you can calculate a field result. Get a variable name and arguments (if they are defined) from the event args. Then set the Handled and Value properties. The Value property can have the string or Document types. If it’s set with a string then this string will be inserted as a field result.

If you want to insert some advanced content, you can set the Value property with a Document instance. So, other rich-text document can be inserted as a field result in a current rich-text document.

Here's an example:

protectedvoidDemoRichEdit_CalculateDocumentVariable(object sender, CalculateDocumentVariableEventArgs e) {switch(e.VariableName) {case"Chart":var sales = GetSales(e.Arguments[0].Value);
                DocumentImageSource chart = DocumentImageSource.FromStream(CreateChart(sales));
                RichEditDocumentServer srv = new RichEditDocumentServer();
                srv.Document.Images.Append(chart);
                e.Value = srv.Document;
                e.Handled = true;break;case"CommonSales":var commonSales = GetCommonSales(e.Arguments[0].Value);
                e.Value = commonSales.ToString("C");
                e.Handled = true;break;default:break;
        }
    }

Demo

Try this feature online now:

DevExpress ASP.NET RichEdit demo - Document Variables Support

Thanks.

Available now in the DXperience v15.1 release, we've introduced a useful improvement for working with the DevExpress MVC Form Layout extension.

Now it's much easier to configure a nested extension.

Form Layout - MVC

The DevExpress MVC Form Layout extension is great because it helps you to create beautiful forms.

The Problem

The Form Layout extension is a container control where it embeds other controls within it.

The problem is when you want to access one of these nested/embedded controls. To do this, previously, you would have to write some code like this:

settings.Items.Add(i => {
   i.NestedExtensionType = FormLayoutNestedExtensionItemType.ComboBox;var cbSettings = (ComboBoxSettings)itemSettings.NestedExtensionSettings;
   cbSettings.Properties.ValueType = typeof(int);…
});

Solution - Lambda Expression

Now with v15.1, it is simple because you can configure it using a lambda expression:

settings.Items.Add(i => {
  i.NestedExtension().ComboBox(s => {
     s.Properties.ValueType = typeof(int);…
   });
});

The new approach benefits you because you do not need have reference type or a separate variable for settings and properties.

And there's less code to write which makes the code more readable!

Demo sample

Check out the an example of this code here:

MVC Form Layout Demo

What do you think of this code improvement? Drop me a line below, thanks!

DevExpress ASP.NET customers have been curious about the changes coming with ASP.NET vNext (aka ASP.NET 5), so let me take this opportunity to announce our plans:

1. We will support ASP.NET 5.
2. In fact, we're working hard on an upcoming release that will support ASP.NET 5.

The new version now has an official name, "ASP.NET 5" and for the rest of this post, I'll use that term. To be clear, ASP.NET vNext is Microsoft's term for the next version of ASP.NET that they are working on.

Which release will support ASP.NET 5?

The specific DevExpress release is still to be determined because as ASP.NET 5 is still in beta. Here's Microsoft schedule:

Because ASP.NET 5 will be released in early 2016, we expect to support ASP.NET 5 with DXperience v16.1 release.

There is a possibility that we could release some bits in DXperience v15.2. Take a look at the feedback section below for more info.

What is ASP.NET 5?

ASP.NET 5 is a significant redesign of ASP.NET. -Daniel Roth, ASP.NET 5 Docs

The Microsoft ASP.NET team has been working hard on the next version of ASP.NET. And there are major changes. And yet, many of the things that you know, will still work the same.

To understand what's coming with ASP.NET 5, I highly recommend you:

1. Watch this video:

2. Or, read the docs.
3. Or, check out the links that Jon Galloway has compilied on this blog post: A 30 Minute Look At ASP.NET vNext
4. Or, check out any of the other great resources listed here: http://asp.net/vnext
5. Or, all of the above.

DevExpress Plans

Here is our plan to support ASP.NET 5:

New Runtimes

Before I discuss our plans, it's important to understand the different runtimes. This image shows the two major runtimes:

Full .NET Framework 4.6

The .NET Framework 4.6 runtime is an incremental upgrade to the existing .NET v4.5 line. And therefore, it's backward compatible and provides all the framework features (WebForms, MVC 5.x, etc.). This framework provides the easiest path for upgrading an existing .NET project.

All DevExpress ASP.NET WebForms controls and MVC extensions work with the Microsoft .NET Framework 4.6 runtime today.

.NET Core 5

As Daniel Roth mentioned above: "ASP.NET 5 is a significant redesign of ASP.NET". And at the heart of it is the new .NET Core 5 runtime.

The .NET Core 5 runtime is a new implementation of .NET that is server-focused and optimized for server and cloud workloads. It's also cross-platform which means you can run it on Linux and OSX:

.NET Core 5 is a modular runtime and library implementation that includes a subset of the .NET Framework. Currently it is feature complete on Windows, and in-progress builds exist for both Linux and OS X. -Steve Smith, ASP.NET 5 Docs

But writing for ASP.NET 5, using .NET Core 5, is very different than what you know today. WebForms and MVC 5.x are not included in this framework. It has been architected in a very different way for web development. Therefore, you cannot use current DevExpress ASP.NET controls with .NET Core 5.

However! There is good news. ASP.NET 5 favors client-side libraries for user interface. Therefore, we plan to leverage DevExtreme (DevExpress' client-side JavaScript framework and widgets).

Short Term Goal:

We plan to create wrappers and provide an easy experience for you to use DevExtreme widgets with ASP.NET 5. We have started this development work already and our non-visual documents library: Spreadsheet, RichEdit(Word), and PDF processing are close to being done.

Long Term Goal:

While the DevExtreme UI widget library does not have as many controls as our ASP.NET subscription, it is growing with each release.

And finally, we have do have some interesting ideas to bring you rich and powerful controls for ASP.NET 5. Stay tuned.

Feedback

If you are highly interested in ASP.NET 5 and DevExpress integration, then please leave a comment below. Your feedback will help us decide on what bits and which release we may target.

Thanks!

A new release of the ASP.NET AJAX Control Toolkit, v15.1.3, is now available. We've included several bug fixes and new features.

You can download the latest release here:

Click the download button above and the get the latest bits.

Or use the Nuget package: ASP.NET AJAX Control Toolkit Nuget package

(If you missed news about the latest v15.1 ASP.NET AJAX Control Toolkit release then please read this helpful blog post.)

v15.1.3 Includes:

1. Bug fixes

• Item 15788 - UpdatePanelAnimationExtender OnUpdating runs on every postback
• Item 27072 - SliderExtender within UpdatePanel causes vertical scrollbar to scroll in Chrome and Safari
• Item 27243 - Double HTML attributes rendered by TabPanel
• Item 27294 - Issue with multiple AsyncFileUpload Control
• Item 27369 - AjaxFileUpload: Drag and Drop is not working on IE10 for Windows 7
• Item 27373 - PieChart doesn't render all segments correctly
• Item 27434 - Keyboard Selection not Working
• Item 27470 - TextBoxWatermarkExtender causes autocompletetype not to work
• Item 27481 - Error in Masked edit validator
• Item 27511 - img/png
• Item 27547 - HtmlEditorExtender Causing Javascript Error on IE 11
• Item 27566 - Multiple image upload using html editor extender control
• Item 27595 - Mask Edit Extender Issue
• Item 27612 - Editor Extender JAVA script error
• Item 27655 - Corrupted Files in AjaxFileUpload
• Item 27717 - HtmlEditorExtender error with Chrome 36.0.1985.125
• Item 27735 - FileUpload Control Displays Upload Button with No Files
• Item 27745 - Javascript error in Chrome with HtmlEditorExtender: Uncaught IndexSizeError
• Item 27764 - MaskedEditExtender type Date fails with "hu-HU" culture
• Item 27812 - Version 15.1 TabContainer CSS Inconsistency for Disabled Tabs
• Item 27813 - Focus hidden tabs
• Item 27844 - CascadingDropDown populated event not working as (I) expected
• Item 27846 - TabContainer in 15.1
• Item 27853 - AjaxControlToolkit 15.1 Combobox VS2013
• Item 27855 - Where is ComboBox predefind theme images?
• Item 27857 - SliderExtender handle image align broken in vertical orientation
• Item 27858 - MaskedEdit extender culture setting issue
• Item 27860 - big issue: htmlextender bug
• Item 27865 - Using AJAX Password Strength with Modal Popup
• Item 27875 - v15.1.x ValidatorCallout static images - incorrect path with ScriptManager.EnableCdn= false
• Item 27892 - HtmlEditorExtender: BackColor and ForeColor buttons is not working

2. Features and improvements:

• Item 8626 - Slideshow effects
• Item 27075 - Table Border/CellPadding/CellSpacing - Replace with CSS

3. Sample site updates:

• Sample site ComboBox themes fixed
• MaskedEdit mask in Sample site fixed

4. Internal improvements:

Client testing introduced.

Documentation

Helpful documentation articles are available on the CodePlex site:

• FAQ (Frequently asked questions)
• Step-by-Step Installation Guide
• Troubleshooting Installer Issues
• Visual Studio IDE support
• Browser support

Feedback

Get the latest ASP.NET AJAX Control Toolkit v15.1.3 release and let us know your feedback by reporting it here.

How to upgrade to v15.1.3

Please take a look at the 'How to upgrade to v15.1 release' article to see how to migrate your existing ASP.NET AJAX Control Toolkit projects to the new v15.1.3 release.

Try DevExpress ASP.NET

We’d like to thank you for installing the DevExpress Edition of the AJAX Control Toolkit and look forward to your feedback as you begin its use.

When we took over the fabulous ASP.NET AJAX Control Toolkit, our goal was to reach those web developers who want to use great web user interface controls for their web projects and DevExpress ASP.NET provides that and much more.

Try the free DevExpress 30 day trial.

Email: mharry@devexpress.com

Twitter: @mehulharry

If you are using the ASP.NET AJAX Control Toolkit, you'll want to make sure it's updated to the latest version as it patches a critical security vulnerability.

The "Directory Traversal" vulnerability affects ASP.NET AJAX Control Toolkit versions prior to v15.1.x.

The vulnerability existed prior to DevExpress taking over the ASP.NET AJAX Control Toolkit. DevExpress has patched this vulnerability with our first release of the ASP.NET AJAX Control Toolkit v15.1.

Details

Brian Cardinale, Principal Application Security Consultant, notified us of the vulnerability last year (thanks Brian!). To help you understand the vulnerability, I'll use Brian's excellent description:

There is a File Write Directory Traversal issue inside the AjaxControlToolkit “AjaxFileUpload” control. When uploading a file using this control, the framework should write the file to the environments “temp” directory. The framework is not validating the “fileid” parameter from being modified. This parameter is later used in the creation of the path in the “temp” directory. This parameter can be modified to write to any location on the disk, as long as file system permissions allows. This exploit can lead to Remote Code Execution if an attacker is able to upload an .aspx file into the web directory. - Brian Cardinale

To learn more, check out Brian's blog post on this issue.

Update to v15.1.x (or higher)

To patch this vulnerability, upgrade your ASP.NET AJAX Control Toolkit version to the latest versions. You can download our useful installer here:

Or use the Nuget libraries:

ASP.NET AJAX Control Toolkit Nuget package

Related posts:

• ASP.NET AJAX Control Toolkit - v15.1.3 - Maintenance update available
• ASP.NET AJAX Control Toolkit - v15.1.2 - Nuget, bug fixes, and more
• Announcing the ASP.NET AJAX Control Toolkit - v15.1

I'm happy to announce that DevExtreme is now available for download through http://bower.io.

So what is bower? A package manager for the web:

Web sites are made of lots of things — frameworks, libraries, assets, utilities, and rainbows. Bower manages all these things for you.

Bower works by fetching and installing packages from all over, taking care of hunting, finding, downloading, and saving the stuff you’re looking for.

Bower is based on Node.js and, therefore, works on OSX, Linux, and Windows environments.

And Bower is now the main tool for client package management in Visual Studio 2015.

Install

After your bower environment is set up, you can install the DevExtreme package by calling:

The "bower install devextreme" call will download and install all scripts, CSS, font icons files, type script definitions, etc to use DevExtreme.

And with Bower, updating your DevExtreme package is as easy as changing the version number in your bower manifest file.

A new release of the ASP.NET AJAX Control Toolkit, v15.1.4, is now available. We've included several bug fixes and new features.

You can download the latest release here:

Click the download button above and the get the latest bits.

Or use the Nuget package: ASP.NET AJAX Control Toolkit Nuget package

(If you missed news about the latest v15.1 ASP.NET AJAX Control Toolkit release then please read this helpful blog post.)

v15.1.4 Includes:

1. Bug fixes

• Item 27961 - HTMLEditorExtender dropdown sets “null” font face
• Item 27955 - AjaxControlToolkit LineChart doesn't work with 3 values in IE11 or Edge
• Item 27570 - Czech time mask switch between dop. and odp.
• Item 27736 - HtmlEditorExtender doesn’t correctly handle html links
• Item 27350 - Typing is not allowed in the ComboBox until list is shown
• Item 25370 - Watermark CSS class overrides TextBox CSS class
• Item 27101 - Background doesn't render properly with Multiple ModalPopupExtenders
• Item 27942 - HtmlEditorExtender adds & symbol when typing < or >
• Item 27346 - CalendarExtender year change bug when setting StartDate and EndDate
• Item 26881 - Accordion sets incorrect height
• Item 27300 - AjaxFileUpload StatusMessage is not updated on fail
• Item 27315 - BalloonPopupExtender DisplayOnClick does not work
• Item 27364 - LineChart control script error (can't find parent div)
• Item 27376 - CalendarExtender updates seconds when clicking "today" button
• Item 27939 - Tabs generates script fatal error in debug mode
• Item 27530 - TabContainer CssClass property ignored
• Item 27917 - MaskedEditExtender clipboard paste broken in IE11
• Item 27929 - MaskedEdit.js uses functions that are missing in IE8
• Item 27920 - MaskedEditExtender loses value
• Item 27921 - Access of undefined array in MaskedEditBehavior
• Item 27911 - CalendarExtender IE8 NaN error
• Item 27906 - DropDownExtender HighlightBackColor property only works with basic colors
• Item 13114 - NumericUpDownExtender IE error
• Item 27379 - AjaxFileUpload remove button bug in IE10
• Item 27112 - BalloonPopupExtender visibility problem if it is placed in TabPanel or TabContainer
• Item 27956 - Autoscroll to TabContainer on AutoPostBack
• Item 27151 - Vertical Scroll position not in top when page loaded
• Item 27926 - MaskedEditExtender breaks CalendarExtender
• Item 27936 - SliderExtender produces a JavaScript error

2. Features and improvements:

• Item 27390 - Charts option to hide the plot value display
• Item 27734 - FileUpload ClearFileListAfterUpload property

Documentation:

AJAX Control Toolkit Documentation updated.

Helpful links

Helpful documentation articles are available on the CodePlex site:

• Sample site

• FAQ (Frequently asked questions)

• Step-by-Step Installation Guide
• Troubleshooting Installer Issues
• Visual Studio IDE support
• Browser support

Feedback

Get the latest ASP.NET AJAX Control Toolkit v15.1.4 release and let us know your feedback by reporting it here.

How to upgrade to v15.1.4

Please take a look at the 'How to upgrade to v15.1 release' article to see how to migrate your existing ASP.NET AJAX Control Toolkit projects to the new v15.1.4 release.

Try DevExpress ASP.NET

We’d like to thank you for installing the DevExpress Edition of the AJAX Control Toolkit and look forward to your feedback as you begin its use.

When we took over the fabulous ASP.NET AJAX Control Toolkit, our goal was to reach those web developers who want to use great web user interface controls for their web projects and DevExpress ASP.NET provides that and much more.

Try the free DevExpress 30 day trial.

Email: mharry@devexpress.com

Twitter: @mehulharry

In the v15.2 release, we've added powerful new capability and features to the DevExpress ASP.NET Grid View control. And I'm happy to announce that these features are available for both ASP.NET WebForms and MVC versions of our GridView!

Responsive & Adaptive!

This release ships with new options that make your web grid application responsive. Our ASP.NET GridView can now automatically adapt its UI based on the screen size (resize UI elements, hide cells of small columns, switch from a table to a card layout on smaller screens, etc.).

Date Range Header Filter

Two new representation modes inspired by Microsoft Windows Explorer are now available for the GridView's date column header filter dropdown. You can define a date range using a calendar or date editors. In both modes, the filter dropdown displays a customizable list of check boxes that allow you to select common date intervals: 'Last week', 'Last month', 'Last year', etc.

Conditional Formatting

With this release, our ASP.NET GridView supports Microsoft Excel inspired conditional formatting of individual cells. Your end-users can now highlight critical information, compare data, visualize trends by using data bars, color scales or icons. Format conditions applied to data cells can also be exported to PDF, RTF, XLS and XLSX.

Truncated Cell Values

Our ASP.NET GridView can now automatically truncate cell values if they don't fit into cell width. To indicate that the text is clipped, the grid displays an ellipsis ('...'). Point the mouse cursor over an ellipsis to display a tooltip with the full text.

Improved EditForm Layout Designer

This release ships with the improved EditForm Designer available at design time. Its new features include:

• Ability to move layout items via drag and drop.
• Ability to assign a nested control to an item via a context menu.

Sign up now to see the improved layout designer in the upcoming webinar.

Register for v15.2 webinar

To see all the new features coming out for the v15.2 release, sign up for the "v15.2: What's New for ASP.NET Developers":

Click here to register

Thanks!

Earlier in 2015, we showed you a preview version of the Card View layout. However, this new Card layout was part of the DevExpress ASP.NET GridView control. As developed its features, we realized that this needs to be its own stand-alone control, so...

I'm happy to announce that in the v15.2 release, we have a new control: DevExpress ASP.NET CardView control (ASPxCardView):

The ASP.NET Card View control is packed with functionality and includes these great new features:

• Adaptive & Responsive
• Batch Editing & Updating
• Conditional Formatting
• Export to PDF, XLS, XLSX and RTF Formats
• Selected Records Export
• Large Database Support (Server Mode)
• Conditional Formatting Export
• Header Panel
• Total Summary
• Endless Paging
• Date Range Header Filter
• Filter Control
• Ellipsis with tooltips in cell texts
• Design-Time Card Layout Editor allows you to build a Microsoft Outlook inspired Contacts View with integrated data shaping and editing capabilities.

There's way too much to show about this control in just this blog post so be sure to sign up the upcoming webinar below.

Register for v15.2 webinar

To see all the new features coming out for the v15.2 release, sign up for the "v15.2: What's New for ASP.NET Developers":

Click here to register

Thanks!

Check out these great new features coming to the powerful DevExpress ASP.NET Spreadsheet in the next release, v15.2.

These features are available for both the ASP.NET WebForms and MVC versions of the Spreadsheet. The new features include:

Frozen Panes (Rows and Columns)

With an Excel inspired Freeze Panes feature, end-users can lock specific rows or columns in one area to keep this area of a worksheet visible while scrolling the worksheet content vertically or horizontally.

Data Validation

An Excel inspired data validation feature helps prevent end-users from entering invalid data into worksheet cells. This feature allows you to definie restrictions and provide notifications on what data can or should be entered in a cell:

Data validation is extremely useful when a workbook is shared by multiple users, and you want the data entered in the workbook to be accurate and consistent.

Table Sorting and Filtering

End-users can now use the Excel inspired AutoFilter feature to filter data by columns and to easily display only rows that meet specific conditions. Three filter types are available (depending upon the column data types): Text, Number, and Date Filters. In addition, the Filter by Values option can be used which allows you to select from column unique values.

Formula Bar

An Excel-like formula bar shows the contents of the current cell and allows creating and viewing formulas. To start creating a formula, click the mouse cursor in the formula bar and enter an equal sign (=).

Formula AutoComplete

The Formula AutoComplete feature makes it easier to create and edit formulas and minimizes typing and syntax errors. After typing an equal sign (=) and beginning letters into a cell, a dynamic drop-down list of valid functions that match the letters is displayed below the cell.

Document Autosave

The Autosave feature helps reduce the risk of data loss by saving an opened document automatically at predefined but customizable intervals. Autosave also helps end-users to stay in-sync with other changes made to the same document if it is opened by multiple users. And there is also a programmatic capability to handle autosave operations and resolve multi-user conflicts (should any arise).

Work Session Hibernation

This feature helps you to save memory (RAM). When enabled, the 'work session hibernation' will automatically free server memory by hibernating inactive open documents in the spreadsheet.

If this feature is enabled, open documents which where idle for a certain time can be released from the server memory and saved to the server file system at a specific path. The hibernation settings (such as a session timeout, server directory) are available through an API exposed by the server DocumentManager object.

Extended Page Setup Functionality

A new Page Setup dialog helps end-users prepare the document for printing. The dialog helps setup several print-related settings (such as document orientation, paper size, page margins, page order, etc.) and provides the capability to specify header and footer text too.

Ribbon Improvements (see ASPxRibbon's new features)

The built-in ribbon is improved by employing the ASPxRibbon control's newly implemented features, such as contextual tabs and one-line mode. Thus, the 'Design' ribbon context tab help with working with tables in a worksheet. One-line ribbon can be used to make navigation more compact within a control and make more room for document editing.

Register for v15.2 webinar

To see all the new features coming out for the v15.2 release, sign up for the "v15.2: What's New for ASP.NET Developers":

Click here to register

Thanks!

There's a great new feature for the DevExpress ASP.NET HTML Editor in v15.2 release: Source Code Editing features like Visual Studio.

To see it in action, check out this short video:

New Features

Here's a list of all the new features for the DevExpress ASP.NET HTML Editor in the v15.2 release:

• Syntax highlighting
• Auto completion
• Indents
• Auto closing tags
• Highlight active line & matching tags
• Find and Replace functionality
• Edit whole document
• Contextual tabs (via Ribbon control)

Find and Replace

Your end-users can now easily locate and modify text data within both the Design and HTML views of the DevExpress ASP.NET HTML Editor. We've added a combination of a Search Panel and the Find and Replace Dialog to enable slick new functionality.

To show the Search Panel, use the Ctrl+F shortcut. The Find and Replace Dialog can be invoked using a specific toolbar button or through the Search Panel's dropdown button.

When you type a search string, the editor's search engine automatically searches the content and highlights potential matches making them navigatable. In the Find and Replace Dialog, the search results are displayed as clickable list items that you can navigate as well.

Edit Full HTML Document

The DevExpress ASP.NET HTML Editor now provides the ability to edit the entire HTML document, including the content of the following tags:

Now your end-users can create and edit the entire web pages using the DevExpress ASP.NET HTML Editor.

Ribbon Improvements

New features of the ASPxRibbon control (contextual tabs) are also available in the DevExpress ASP.NET HTML Editor to improve the functionality of its built-in ribbon navigation.

Register for v15.2 webinar

To see all the new features coming out for the v15.2 release, sign up for the "v15.2: What's New for ASP.NET Developers":

Click here to register

Thanks!

YouTube: Using a Secure WebAPI Web Service from a Mobile App

Check out the webinar video above which helps you learn how to:

1. Create a secure WebAPI service
2. Understand authentication & authorization
3. Consume the service using a mobile app

Github repo

DXDevExtremeWebAPI

Fork the repo, send pull requests, and tell us what've you're using the 'educational' library for by leaving a comment below.

Common terms

• WebAPI
• REST
  • Blog: Intro to REST & .net Web API
• Endpoints
  • Example of endpoints
• JSON
• OAuth 2.0
  • OAuth flow diagram

Best Practices

• Use SSL
• API design guidance
• RESTful API Design
• Best Practices for Designing a Pragmatic RESTful API

Cloud API Service

• Azure API Management
• apigee
• and many more...

Public API

• Swagger - API metadata
• ProgrammableWeb - API directory

Additional resources

• Blog: Secure a Web API with Individual Accounts and Local Login in ASP.NET Web API 2.2
• Securing ASP.NET Web APIs - excellent talk by Dominick Baier
• Enabling Cross-Origin Requests in ASP.NET Web API 2

Have you tried DevExtreme yet? I'd love to hear about it. Drop me a line below.

Thanks!