ygyemo

Text filtering problem
I have seen such as: str.Replace("script","")...
Think this is bad
Wouldn’t it be better if it could keep the content as it was and was not vulnerable to script attacks?
Expert advice~!~1

xuluwei8

Replaced <>

ygyemo

I thought about this too!
but
After storing in the database, then what to do when it is read on the page

niaobiede

Use htmlencode and htmldecode to protect against attacks

dingbiao

"<" ==> "&lt;"
">" ==> "&gt;"
I’m not afraid of the replacement

ygyemo

Thanks upstairs

I want to be a text editor
Just like the text box when replying in verysource, you can output the input content in the original format

Normal text box has no line breaks

江南小色

This trouble, you must have a dictionary of html encoding corresponding to special characters.
Refer to the source code of freetextbox.

江南小色

I mean ‘output the input content in the original format’. If it’s just a carriage return or line feed, it’s another matter.

ygyemo

solved
Just process the input characters
Thank you all