why do i need to do html.encode()
- by ooo
if i have a user entering data into a rich text editor and submitting data that i am storing into a database and then retrieving to show on other dynamic web pages, why do i need encoding here.
Is the only reason because someone might paste javascript into the rich text editor? is there any other reason ?