How to Restrict User to Put HTML Tag into TextBox with mvc5.

Question

Jayraj Chhaya · Answer

you can use the built-in validation features provided by the framework. One approach is to use the [AllowHtml] attribute to explicitly allow HTML input for specific properties in your model, while disallowing it for others. Here's an example of how you can achieve this: public class MyModel { [DataType(DataType.MultilineText)] [DisallowHtml] public string Description { get; set; } } @model MyModel @Html.TextAreaFor(m => m.Description) In your model class, decorate the property that should not allow HTML tags with the [DataType(DataType.MultilineText)] attribute. This attribute is used to specify that the property is a multiline text input. In your view, use the Html.TextAreaFor helper method to render the TextBox for the property. By using the [DisallowHtml] attribute, any HTML tags entered by the user will be automatically stripped out when the form is submitted. This helps prevent potential security vulnerabilities such as cross-site scripting (XSS) attacks.

Yogi S · Answer

You can do html encoding of text or use reqular expression to check for html tag entries.

Jithu Thomas · Answer

$.validator.addMethod("noHtml", function (value, element) { return !/ ]*>/g.test(value); }, "HTML tags are not allowed."); $(document).ready(function () { $("#YourTextBoxId").rules("add", { noHtml: true }); }); Replace YourTextBoxId with the actual ID of your TextBox.

How to Restrict User to Put HTML Tag into TextBox with mvc5.

Insert Link

Embed YouTube Video

Table Options

Insert Image

Answers (3)