English 中文(简体)
如何以超文本形式安全展示用户投入?
原标题:How to display user input safely in HTML?

附录一在我的伙伴关系上有一个文本箱。 用户进入某一文本的净网页。

On another page, I have the following: <p><%=userText%></p>, where userText refers to the text that the user entered on the previous page.

如果案文含有特殊性,我需要做些什么来适当展示? 此外,用户也可进入将展示给其他用户的文本,因此,我必须防止滥用(例如:注射<代码><script>tags)。

最佳回答

页: 1

String TestString = "This is a <Test String>.";
String EncodedString = Server.HtmlEncode(TestString);
问题回答

暂无回答




相关问题
Anyone feel like passing it forward?

I m the only developer in my company, and am getting along well as an autodidact, but I know I m missing out on the education one gets from working with and having code reviewed by more senior devs. ...

How to Add script codes before the </body> tag ASP.NET

Heres the problem, In Masterpage, the google analytics code were pasted before the end of body tag. In ASPX page, I need to generate a script (google addItem tracker) using codebehind ClientScript ...

Transaction handling with TransactionScope

I am implementing Transaction using TransactionScope with the help this MSDN article http://msdn.microsoft.com/en-us/library/system.transactions.transactionscope.aspx I just want to confirm that is ...

System.Web.Mvc.Controller Initialize

i have the following base controller... public class BaseController : Controller { protected override void Initialize(System.Web.Routing.RequestContext requestContext) { if (...

Microsoft.Contracts namespace

For what it is necessary Microsoft.Contracts namespace in asp.net? I mean, in what cases I could write using Microsoft.Contracts;?

Separator line in ASP.NET

I d like to add a simple separator line in an aspx web form. Does anyone know how? It sounds easy enough, but still I can t manage to find how to do it.. 10x!

热门标签