javascript - Disable the ability to post HTML content to a Textarea -
i'm facing weird problem html code. people started posting html content such html forms, input boxes, check boxes via textarea , messed website's content. need disable ability post html content via textareas , allow text. example: if type html <input> tag, that'll delivered text , not html.
however, need enable ability post content <a> tags since i'm allowing ability post links, etc. should given ability post <img> tags has specific class (class name 'emoji-class'), since i'm giving ability post emojis.
conditions:
- allow text contain
<a href>tags - allow text contain
<img>that contain class named 'emoji-class'. other<img>tag not passed html content via text area
i receive content via javascript:
https://jsfiddle.net/wv4s511e/11/
how can add these conditions textarea/javascript such every other html content received text content aforementioned html tags received html content?
edit:
i'm coding on asp.net
disabling ability post html bad idea, better way encode html tags they're being shown on webpage.
this way, dom won't recognise html tags , won't mess code, still shows on webpage itself.
more information: http://www.w3schools.com/asp/met_htmlencode.asp
Comments
Post a Comment