Accepting certain tags in a textbox

[Guest]

ASP.NET will generate a failure/security warning, if you enter html tags into
a textbox (of course, the failure will come after the postback).

That's nice and useful, and I know you can turn it off completely, but is it
possible to turn it off just for certain tags, not all tags?

 

[S. Justin Gengo]

No, you'll need to turn it off for the page in question and then filter to
make certain that only the tags you want to allow may pass through.

I would suggest using a regular expression validator so that only the
characters you want to allow may be submitted to the page.

E.g. a regular expression to allow only letters and number would look
something like this: [A-Z][a-z][0-9] if you then add to that the characters
you'd like to allow you will still have protection from invalid characters
being entered.

--
Sincerely,

S. Justin Gengo, MCP
Web Developer / Programmer

www.aboutfortunate.com

"Out of chaos comes order."
Nietzsche
"the friendly display name"

 

[Patrick.O.Ige]

Also to add to Justin's advice you should look at
:-http://www.regexlib.com/
and explore more of reg expressions.
Patrick

No, you'll need to turn it off for the page in question and then filter to
make certain that only the tags you want to allow may pass through.

I would suggest using a regular expression validator so that only the
characters you want to allow may be submitted to the page.

E.g. a regular expression to allow only letters and number would look
something like this: [A-Z][a-z][0-9] if you then add to that the characters
you'd like to allow you will still have protection from invalid characters
being entered.

--
Sincerely,

S. Justin Gengo, MCP
Web Developer / Programmer

www.aboutfortunate.com

"Out of chaos comes order."
Nietzsche
"the friendly display name"

ASP.NET will generate a failure/security warning, if you enter html tags
into
a textbox (of course, the failure will come after the postback).

That's nice and useful, and I know you can turn it off completely, but is
it
possible to turn it off just for certain tags, not all tags?