if i have a user entering data into a rich text editor (tiny editor) and submitting data that i am storing into a database and then retrieving to show on other dynamic web pages, why do i need encoding here. Is the only reason because someone might paste javascript into the rich text editor? is there any other reason ? ...
Can I use the <%: tag on an application that will be hosted on IIS6? What about on an application targeted for .NET 3.5? ...
I have a number of fields where I want to display the data in red if it is expired. <%= Html.Encode(String.Format("{0:d}", Model.Subcontract.insurance_GL))%> If the date is less than today's date, then I'd want it to display in red. What is the best way to do this? EDIT This is for my Detail View. It's not in a grid. It's just a li...