Disallowing HTML Tags (JScripts) from being entered

[Henry]

Hi guys,

I was wondering if anyone knows if the .NET framework has a library or
methods that I can use to diallow users from entering HTML tags and more
importantly JavaScript into textboxes and being stored in the database.

Thank you in advance.

Henry

 

[M. Burnett]

ASP.NET automatically blocks HTML input in a form. This setting is an
attribute of the <pages> element in machine.config. You can also disable it
on a per-page basis with this tag on the page itself:
<% @ Page validateRequest="True" %>







Mark Burnett
Windows Server MVP - IIS