Friday, July 18, 2014

 ...

When you are sure you HTML-encode everywhere you pass strings to HTML, then set validateRequest="false".
In .NET 4 you may need to do a little more. Sometimes it's necessary to also add to web.config

0 Comments:

Post a Comment