jqGrid and XSS Security
February 8, 2010
Author: Craig Stuntz
Version 3.5.2 of jqGrid included an important new feature:
Now when autoencode is set to true we encode the data coming from server and not only when we post it (secutity fix)
Prior to this, you were required to encode the data yourself.
Now personally, I think that should be the default. But it would have been a breaking change for the grid, since there are a few cases where…