Cross- Side Scripting and SQL data reader

[Guest]

I am using sqlDataReader for Showing data from the Data base
But if the Data from sql is having tags like <script>alert()</script> then it shows an alert box while binding

Is there any way of suppressing it this ..... ???

regard
Vineet Batt

 

[Andy Gaskell]

I think you're looking for the Server.HtmlEncode method.

http://msdn.microsoft.com/library/d...mwebhttpserverutilityclasshtmlencodetopic.asp

I am using sqlDataReader for Showing data from the Data base.
But if the Data from sql is having tags like <script>alert()</script> then

it shows an alert box while binding.

 

[Guest]

No..... this approach can be used if u are retrieving value and binding to the control like label

Here i am having sqlDataReader object................... which connects to Data in sql D/B

E.g

ListDataGrid.DataSource = sqlReaderObject
ListDataGrid.DataBind()

-Vineet Batt