How to allow my Asp.net MVC 3 web app using MathJax to accept user input $x<y>z$ ?
- by Recycle Bin
I am developing a mathematics site using Asp.Net MVC 3 + Razor + MathJax.
MathJax is a javascript library to render TeX or LaTeX codes on the web browser.
And TeX or LaTeX codes represent mathematics contents such as an inline math $y=mx+c$ and a displayed math \[y=mx+c\].
Right now my site can accept input, for example, $x<y$. However it cannot accept $x<y>z$ because the framework regards this input is vulnerable to XSS and XSRF.
Shortly speaking, what I should do to accomplish what I want but it does not open security vulnerability.