Escaping Text in a GridView for SQLServer databases
ASP.NET
1
Posts
1
Posters
0
Views
1
Watching
-
I am trying to come up with a way to use Uri.EscapeDataString() and Uri.UnescapeDataString() in a templated GridView so I can put tags into text that is uploaded into a SQlServer table, so that the formatted text can be put into a label on a web form. By escaping the data, I do not want to have ValidateRequest="false" set on the page header. I am trying to keep sqlInjection attacks from possibly happening on a database editing form. My goal on this page is to drop one of the html editors onto the page to make the textbox become a word-like editor so the client can format data to be displayed on the website. Thanks for any suggestions Tom