ASP.NET - Prevent webform from script injection attacks



Validating in put to allow encoded HTML content

<%@ Page Language="C#" AutoEventWireup="true" ValidateRequest="false"  Inherits="SyntaxHelp.AspNet" %>

To disable request validation at application level

<configuration>
   <system.web>
      <pages validateRequest="false" />
   </system.web>
</configuration>

Share |

 Cant find the page you are looking for?
 Help us to improve by adding the content that you are looking for.
 Leave a feedback
 We look forward to hear your comments and feedback.