html - Cannot show DropDownList in Google Chrome with encoding characters -
i having issue dropdownlist in asp.net , google chrome:
in data sources, have values encoding characters: <script>alert('xss')</script>
then bind dropwdownlist. dropdownlist contain options after encoding:
<!doctype html> <body> <select> <option selected="selected" value=""></option> <option value="1753"><script>alert('xss')</script></option> <option value="1758"><script>alert('xss')</script></option> <option value="1801"><script>alert('xss')</script></option> <option value="2024"><script>alert('xss')</script></option> </select> </body>
but dropdownlist cannot open in google chrome, still can open in firefox , ie. wrong points? can me resolve it?
Comments
Post a Comment