c# - Does @Html.Textarea sanitize input? -


i have web form allows enter user input @html.textarea. if there form validation error, input shown in text area. if form submits successfully, user's input sent database.

i've tried various things can think of sql injection, , appears microsoft's built in functionality catching it. should doing sanitize input?

i'm using latest mvc razor framework. using strong types. i've read html.encode, think html.textarea method doing this? have not implemented it.

the razor part not implement of checking (since has no way of knowing consider valid input). database layer using in mvc deals injection attacks.


Comments

Popular posts from this blog

Ansible - ERROR! the field 'hosts' is required but was not set -

customize file_field button ruby on rails -

SoapUI on windows 10 - high DPI/4K scaling issue -