Preventing people from entering HTML in textarea

[Angela]

Hi,

I have a text area and I want prevent people from entering HTML text
in the text area.

Someone putting "</textarea></tr><img
src="http://www.xxx.com/images/pic.gif">" in the textarea will
manipulate the page if the page was revisited.

Does anyone have any ideas?

Thanks in advance

Angela

 

[Evertjan.]

Angela wrote on 05 mrt 2004 in comp.lang.javascript:

I have a text area and I want prevent people from entering HTML text
in the text area.

Someone putting "</textarea></tr><img
src="http://www.xxx.com/images/pic.gif">" in the textarea will
manipulate the page if the page was revisited.

only if you reenter that string from serverside,
so that asks for a serverside solution,
depending on your server language.

clientside it could be done by:

onchange=
"this.value=this.value.replace(/</g,"&lt;")

[not tested]

but clientside JS could be manipulated by a client too.

 

[Angela Lam]

I will be using ASP, so maybe I will have to use regExp to solve this
problem