Subversion-Projekte lars-tiefland.prado

Revision

Details | Letzte Änderung | Log anzeigen | RSS feed

Revision Autor Zeilennr. Zeile
1 lars 1 
<com:TContent ID="body" >
2 
 
3 
<h1 id="4201">TSafeHtml</h1>
4 
<com:DocLink ClassPath="System.Web.UI.WebControls.TSafeHtml" />
5 
 
6 
<p id="490308" class="block-content">
7 
<tt>TSafeHtml</tt> is a control that strips down all potentially dangerous HTML content. It is mainly a wrapper of the <a href="http://pixel-apes.com/safehtml/">SafeHTML</a> project. According to the SafeHTML project, it tries to safeguard the following situations when the string is to be displayed to end-users:
8 
</p>
9 
<ul id="u1" class="block-content">
10 
  <li>Opening tag without its closing tag</li>
11 
  <li>closing tag without its opening tag
12 
  <li>any of these tags: base, basefont, head, html, body, applet, object, iframe, frame, frameset, script, layer, ilayer, embed, bgsound, link, meta, style, title, blink, xml, etc.</li>
13 
  <li>any of these attributes: on*, data*, dynsrc</li>
14 
  <li>javascript:/vbscript:/about: etc. protocols</li>
15 
  <li>expression/behavior etc. in styles</li>
16 
  <li>any other active content.</li>
17 
</ul>
18 
 
19 
<p id="490309" class="block-content">
20 
To use <tt>TSafeHtml</tt>, simply enclose the content to be secured within the <tt>TSafeHtml</tt> component tag in a template. The content may consist of both static text and PRADO controls. If the latter, the rendering result of the controls will be secured.
21 
</p>
22 
 
23 
<com:RunBar PagePath="Controls.Samples.TSafeHtml.Home" />
24 
 
25 
<div class="last-modified">$Id: SafeHtml.page 1650 2007-01-24 06:55:32Z wei $</div></com:TContent>