Crystal Report for visual studio 2017 - 13.0.24 - Unsafe Use Of Target blank

[former_member586002]

In order to fix a security vulnerability Unsafe Use Of Target blank when using the "target" attribute, "rel" attribute should also be set as “noopener noreferrer”. Following two instances does not follow above security guidelines:

1. crystalreportviewers13/allInOne.js - Line no. 13037
2. crystalreportviewers13/js/flexparameterbridge.js - Line no: 50

Can we expect these to be fixed in future release?

[former_member11696 · Accepted solution]

Sorry I meant up date this post:

191930 / 2019 Crystal Report for visual studio 2017 - 13.0.24 - Unsafe Use Of Target blank

2777152 - Crystal Report for visual studio uses "Unsafe Use Of Target blank" tag in the WEB form viewers

It's been fixed and will be in the next patch SP 25 due out in early May.

Don

[former_member586002]

Hi Don,

Do you have any update? We require an immediate resolution to close this vulnerability at our end.

Thanks,

Binod

[former_member11696]

Hi Binod,

I'm checking with R&D on this subject.

We'll see what they have to say about it...

Thanks for reporting it to us.

Don