Hi, I am just wondering if it is a good idea to do Server.HtmlEncode anywhere there is a user input involved? Is there a down side to this approach? And, normally where do people encode on the user input, is it in the UI layer, BLL or DAL?
Thank you so much,
Ray.
...
Go to the complete details ...