Skip to content

Commit

Permalink
Sync with Kendo UI Professional
Browse files Browse the repository at this point in the history
  • Loading branch information
kendo-bot committed Nov 13, 2024
1 parent 1e84a46 commit 296c653
Show file tree
Hide file tree
Showing 29 changed files with 407 additions and 1,080 deletions.

Large diffs are not rendered by default.

Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Original file line number Diff line number Diff line change
Expand Up @@ -23,14 +23,18 @@ If the strict CSP mode is enabled, some browser features are disabled by default

* Dynamic code evaluation through `eval()` and string arguments for both `setTimeout` and `setInterval` are blocked.

## (For R1 2023 SP1 and Later) Working with Telerik UI for {{ site.framework }} Components
## Telerik UI for {{ site.framework }} 2024 Q4 and Later

As of R1 2023 release, the Kendo UI scripts address the `unsafe-eval` directive for all components except for the [Spreadsheet](https://docs.telerik.com/kendo-ui/controls/spreadsheet/overview).
Starting with 2024 Q4 release, all Telerik UI for {{ site.framework }} components are CSP compliant.

## Telerik UI for {{ site.framework }} Versions between R1 2023 and 2024 Q4

> For the bigger part of its core engine, the Kendo UI for jQuery Spreadsheet uses the `Function` evaluation, and rewriting the logic of the component will lead to a great number of breaking changes.
As of R1 2023 release, the Kendo UI scripts address the `unsafe-eval` directive for all components except for the [Spreadsheet](https://docs.telerik.com/kendo-ui/controls/spreadsheet/overview).

The rest of the Kendo UI components and internal mechanisms have been rewritten to discard the usage of the `eval()` and `new Function()` calls.

## Achieving CSP Compliance with the Helpers

{% if site.core %}

When Kendo UI components are initialized from HTML helpers or Tag Helpers, inline scripts are generated automatically after each component HTML markup. When the CSP is enabled, you will get the following error:
Expand Down Expand Up @@ -188,7 +192,7 @@ For a runnable example, refer to the [Template component integration with Grid d

The engine for the Kendo UI [inline](https://docs.telerik.com/kendo-ui/framework/templates/get-started-inline) and [external](https://docs.telerik.com/kendo-ui/framework/templates/get-started-external) templates will remain available. However, if you are using the previous template syntax, you must include the `usafe-eval` directive into the application `meta` tag.

## (Prior to R1 2023 SP1) Working with Telerik UI for {{ site.framework }} Components
## Telerik UI for {{ site.framework }} Before R1 2023 SP1

The Telerik UI for {{ site.framework }} releases before the R1 2023 SP1 one does not support the strict CSP mode. Thus, in these previous versions, if the Content Security Policy (CSP) is enabled, you can set the [`script-src` policy](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/script-src) as follows:

Expand Down
2 changes: 1 addition & 1 deletion docs/api/javascript/ui/spreadsheet.md
Original file line number Diff line number Diff line change
Expand Up @@ -1367,7 +1367,7 @@ A Boolean value which indicates if the sheets-bar will be displayed.

A Boolean value which indicates if the toolbar will be displayed.

Apart from the built-in tools, the Spreadsheet Home, Insert and Data ToolBars fully expose the [ToolBar.items API](/api/javascript/ui/toolbar/configuration/items). This way you can specify any custom tools in the widget using the components available in the ToolBar itself:
Apart from the built-in tools, the Spreadsheet File, Home, Insert, Format, Data and View ToolBars fully expose the [ToolBar.items API](/api/javascript/ui/toolbar/configuration/items). This way you can specify any custom tools in the widget using the components available in the ToolBar itself:

#### Example

Expand Down
8 changes: 8 additions & 0 deletions docs/backwards-compatibility/2024-backward-compatibility.md
Original file line number Diff line number Diff line change
Expand Up @@ -103,6 +103,14 @@ The Splitter has received a rendering update. As a result, the below classes hav

Apart from that, we made changes in the positioning styles of the component. Until now, the panes had the `position:absolute` style. As of the 2024 Q4 release, the panes are positioned using flexbox.

**Spreadsheet**

* The tabs in the Spreadsheet are now rendered via [`Kendo Menu`](/api/javascript/ui/menu) instead of a [`Kendo TabStrip`](/api/javascript/ui/tabstrip).
* The rendering of the SheetsBar at the bottom is unified with the rendering of a [`Kendo UI TabStrip`](/api/javascript/ui/tabstrip).
* The `Add New Sheet` tool in the SheetsBar is now created from `<button>` element instead of `<a role="button"\>`.
* The `Quick Access` section in the top toolbar is removed and the `Undo` and `Redo` buttons are moved in the Home tab.
* The tools in the [`toolbar`](/api/javascript/ui/spreadsheet/configuration/toolbar#toolbar) are now splitted into six separate tabs - File, Home, Insert, Format, Data and View.

**PDFViewer**

The PDFViewer starts using the [Pager](https://docs.telerik.com/kendo-ui/controls/pager/overview) component internally and follows its specification.
Expand Down
2 changes: 1 addition & 1 deletion docs/controls/charts/accessibility/overview.md
Original file line number Diff line number Diff line change
Expand Up @@ -29,7 +29,7 @@ The Chart supports the standards for providing accessible web content which are
Meeting some of the Success Criteria in WCAG 2.2 may require additional customization:
* ***1.4.3** Contrast (Minimum)*

The color of chart elements may need to be customized to meet the minimum required contrast level. Some [Theme Swatches]({% slug sassbasedthemes_swatches_kendoui %}) like the [Ocean Blue A11y Accessibility Swatch]({% slug high_contrast_theme_accessibility_support %}) meet and exceed this criteria.
The color of chart elements may need to be customized to meet the minimum required contrast level. Some [Theme Swatches]({% slug sassbasedthemes_kendoui %}) like the [Ocean Blue A11y Accessibility Swatch]({% slug high_contrast_theme_accessibility_support %}) meet and exceed this criteria.
* ***2.5.8:** Target Size (Minimum)*

The size of [Series Markers](https://docs.telerik.com/kendo-ui/api/javascript/dataviz/ui/chart/configuration/series.markers) and the font size of [Legend Items](https://docs.telerik.com/kendo-ui/api/javascript/dataviz/ui/chart/configuration/legend.item) may need to be customized to meet the minimum size of 24x24px required by this criteria.
Expand Down
Loading

0 comments on commit 296c653

Please sign in to comment.