Request Validation – Preventing Script Attacks
This entry was posted on 26 September, 2009
No comments yet
This item was filled under [ Forums ]
Request validation, a feature of ASP.NET since version 1.1, prevents the server from accepting content containing un-encoded HTML. This feature is designed to help prevent some script-injection attacks whereby client script code or HTML can be unknowingly submitted to a server, stored, and then presented to other users. We still strongly recommend that you validate all [...]