Remove HTML tags from Textbox w/o turning off ValidateRequest
I know when a user tries to add HTML like tags in a text box, an error will occur if ValidateRequest is turned off....however there are some security implications when this is turned off....I know how to remove HTML tags using RegEx, but I don't know how to remove the HTML before the validaterequest throws an error.
Any Ideas? I want to just remove the HTML so the text being posted will be valid. Thanks!
Any Ideas? I want to just remove the HTML so the text being posted will be valid. Thanks!
You can do this using JavaScript at client side before data is submitted to server, here are couple of links on this topic:
- http://www.codeproject.com/aspnet/SubmissionHijack.asp?df=100&forumid=86607&exp=0&select=921475
- http://weblogs.asp.net/mhawley/archive/2004/03/15/89762.aspx
- http://www.codeproject.com/aspnet/SubmissionHijack.asp?df=100&forumid=86607&exp=0&select=921475
- http://weblogs.asp.net/mhawley/archive/2004/03/15/89762.aspx
Not the solution you were looking for? Getting a personalized solution is easy.
Ask the ExpertsThanks for using Experts Exchange.
Create a free account to continue.
Limited access with a free account allows you to:
- View three pieces of content (articles, solutions, posts, and videos)
- Ask the experts questions (counted toward content limit)
- Customize your dashboard and profile
*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.