Disallowing HTML Tags (JScripts) from being entered

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

Henry - 21 Apr 2004 06:08 GMT

Hi guys,

I was wondering if anyone knows if the .NET framework has a library or
methods that I can use to diallow users from entering HTML tags and more
importantly JavaScript into textboxes and being stored in the database.

Thank you in advance.

Henry

Reply to this Message

M. Burnett - 18 Oct 2004 20:14 GMT

ASP.NET automatically blocks HTML input in a form. This setting is an
attribute of the <pages> element in machine.config. You can also disable it
on a per-page basis with this tag on the page itself:
<% @ Page validateRequest="True" %>

Mark Burnett
Windows Server MVP - IIS

> Hi guys,
>
[quoted text clipped - 5 lines]
>
> Henry

Reply to this Message

Free Magazines

Get these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...