Reputation: 145
I have a editable textbox. If I will enter alert('Hi'); , then it saves properly. After saving it will forward to a list page where that text box value will be a hyperlink. If we click on that hyperlink then alert displays. But we want to escape this. Can any one have the resolution for this ? Thanks in advance
Upvotes: 0
Views: 84
Reputation: 8366
Before the text is saved for further processing or display,
replace all "<"
by "<"
and replace all ">"
by ">"
Upvotes: 1