id	summary	reporter	owner	description	type	status	priority	milestone	component	version	resolution	keywords	cc
7285	ASP.NET: certain configuration options are not properly escaped	Wiktor Walc	kaga	" - FontSizeSizes are marked as an object and thus are not surrounded with quotes.
 - StylesSet and ContentsCss may contain a string or an array so it must be surrounded with quotes only when ""[]"" characters are not detected at the beginning and at the end
 - Toolbar property must be prepared also for a JavaScript array, if user enters there something like
{{{
[
    [ 'Source', '-', 'Bold', 'Italic' ]
]
}}}
 the ASP.NET control should handle it properly
 - ProtectedSource must handle properly the situation when user enters the following:
{{{
/<\?[\s\S]*?\?>/g
/<%[\s\S]*?%>/g
/(]+>[\s|\S]*?<\/asp:[^\>]+>)|(]+\/>)/gi
}}}"	Bug	closed	Normal		Server : ASP.Net	3.5.2	fixed