Hello everyone and I hope you are having a great weekend.
I have got a form which I have spent a while constructing and on this form I have a rich text box. I had a bit of trouble with the AjaxControlToolkit offering and so I am now using a TinyMCE control. I also had trouble with the AntiXss provider so I have cut my own module based on this code (http://eksith.wordpress.com/2012/02/13/antixss-4-2-breaks-everything) - The link is provided in C but I converted it to VB.
Now, I had lots more trouble with ASP detecting all of the postbacks as dangerous so I have had to disable event validation and set ValidateRequest = false. As a result of all of this work I am essentially managing all of the XSS security myself.
Currently when a user types information into a text box (rich text box or otherwise) what I am doing is taking this text and passing it through my HTML sanitizer to strip out any dangerous tags or text. This text is then passed as an input parameter t ...
Go to the complete details ...