How to [AllowHtml] but deny any scripts?
In asp.net mvc to post any html i need to set [AllowHtml]
on property and Validate(input)
on controller, but how allowing post开发者_运维百科 html deny to post any scripts?
You could look at using Microsoft Anti-Cross Site Scripting Library V4.0 to sanitize the input
精彩评论