page validation

[Lloyd Dupont]

I am writing a 'blog control' which, amongst other things, let you edit some
HTML text.
When it's submited back there are validation problem and to my... *Horrible
Disbelief* it seems I can only enable/disable control validation on the
whole page, I found no way to do it on a per control basis!

I mean, come on, I would like to keep the default validation control
behavior but, on my HtmlEditControl I would like to test it myself to see if
the content is allright.. without breaking the rest of the page.

Is there anyway to do that?

 

[Guest]

Have you tried using CustomValidator with your HtmlEditcontrol?

 

[Karl Seguin]

Ur talking about the validation controls such as requiredFieldValidator and
regularExpressionValidator and such? In 1.x the controls don't support
that. In 2.0 they support grouping which would solve your problem.

In 1.1 you can use server side validation, turn validation off and
individually callthe Validate() method of each control. This is outlined
at:http://aspalliance.com/699#Page4 under
Several buttons associated with their own validators.

There are 3rd party controls out there that offer the grouped validation
feature of 2.0 for 1.1

Karl

 

[Peter Blum]

Hi Lloyd,

My interpretation of this question is that you are talking about validation
from Cross Site Scripting attacks that is managed by the <@ Page
requestValidation="true"> property. By turning off that property, all inputs
on the page are no longer secure. You want to protect all inputs except the
HTML textbox, right?

Because ASP.NET doesn't have validation support on an input-by-input basis,
I built a commercial solution, "VAM: Visual Input Security"
(http://www.peterblum.com/vise/home.aspx) which is in my Professional
Validation And More product. Even if you don't want a commercial solution, I
encourage you to download the Trial version and read the "Overview" and
"Primer" sections in the Visual Input Security User's Guide. They will
educate you to the issues of implementing security correctly.

--- Peter Blum
www.PeterBlum.com
Email: (e-mail address removed)
Creator of "Professional Validation And More" at
http://www.peterblum.com/vam/home.aspx

 

[Lloyd Dupont]

It's exactly that! (the scripting attack thing, I mean)

However you also guessed right that I am not interested in commercial
product!
Sorry, but who knows if my (soon to come) shareware(s) is very successful, I
might!
Anyway I will read the info, thanks for that!