<embed
src="http://www.youtube-nocookie.com/v/h_caNPnoDdI&hl=en_US&fs=1&rel=0&color1=0x5d1719&color2=0xcd311b&border=1"
type="application/x-shockwave-flash"
allowscriptaccess="always"
allowfullscreen="true"
width="660"
height="525"></embed>
I am going to create a custom pop up box that takes the HMTL that is between the <embed> and </embed> and his pop up box will allow a user to load a youtube video into a page. Once a person loads the in between code I will use codebehind to wrape the input with <emded></emded> tags and then save into into a SQL database.
I will HTMLEndcode and HTMLdecode the HTML between saving it in SQL and re loading it into a page to help avoid against BAD HTML, Scripts etc.
Any advice how I can stop unwanted script from use ...
Go to the complete details ...