Author: nirman.doshi | Posted on: 7/7/2009 6:47:09 AM | Views : 303

I have a textbox, which is of free-text type. Means, users can enter any characters there.
But as I have kept "ValidateRequest = True" on <%Page.. tag, it throws run-time error of "Potential HTML threat" whenever it finds "<" or ">" character while submitting. 
I can't set ValidateRequest to False, as thats obviously very insecure way to code.
Neither I want to restrict these characters "<", ">" as users sometime want to enter this.
So how can I handle this situation. I mean, without restricting "<", and ">" characters, I want to avoid this run-time exception, as well as any potential threat of HTML injection.
Kindly share your ideas.
Thanks
...

Go to the complete details ...