(Explanation: This is an old question that has been teased for administrator purposes)
Textareas and There are appropriate questions on this site about parsing HTML from whatnot or allowing HTML in the textbox. My question is the same: How do I find out whether the HTML text box exists or not? Do I need to run it through a regular expression of all known HTML tags? Is there an existing library? Find out that the HTML is inserted into a textera?
EDIT: Similarly, what is the Javascript library that does it?
Edit # 2: The way the web app works (Confirms Teteraera text on asynchronous postback using valid method of ASP.NET), code- It is a bomb before coming back. My concern was trying to find another way to handle HTML in those examples.
There really is no answer, but why do you need it? You should clean the HTML input only when you are going to output it without modifications, that is, if you want to allow your users to actually use HTML and if you want you to have HTML address There is no need to apply, so you need to make sure that you keep it safe, it's good for Jeff Atwood.
If you want to stop all HTML outputs, you can also take user inputs without any query. Just keep in mind HTMLX, and save it like this. Then your output will not contain any "real" HTML written by the user.
Comments
Post a Comment