ASP.NET: Remove HTML Tags From a String
A lot of websites allow users to input text and submit it to the site.This could be forums, blogs, content management systems etc. Imaging if the user writes HTML into these form fields? It could be perfectly harmless when used for styling, but it could also be used the wrong way. A typical scenario would be when a user enters JavaScript that does harmful things or embedding a style sheet that ruins the websites layout. This is normally referred to as Cross-Site Scripting (XSS). We have to mitigate that risk, and thats when regular expression comes to the rescue. Here is
December 15, 2006 @ 10:15 AM · Filed under Uncategorized
Permalink
No Comments