hi all, try this code below:
<asp:RadioButton ID="RadioButton1" runat="server" Text="<script type='text/javascript'>alert('injected!');</script>" />
<asp:CheckBox ID="CheckBox" Text="you & me" /> -- causes invalid xhtml
why the label (Text) of radiobutton and checkbox are not encoded by default?
...
Go to the complete details ...