HTML Encode for @Html.TextAreaFor(model =>model.Product.LongDesc ,10,100,null)
I have LongDesc field which can have html text and I want to save开发者_Go百科 that in database using model binding. I don't want to skip the xss security part by making ValidateInput to false. Is there any way I can use @MvcHtmlString.Create
or @Html.Raw
along with Model binding
You could set AllowHtml attribute on LongDesc
field and use AntiXSS library to check input value.
精彩评论