gordon-cs / Project-Phoenix

The Electronic Room Condition Inventory
0 stars 0 forks source link

Remove html validation for submitting passwords #179

Closed eanyanwu closed 7 years ago

eanyanwu commented 7 years ago

When a user's password has HTML-like characters in it, ASP.NET automatically does input validation and throws an exception. This default behavior helps prevent things like cross-site scripting attacks. However, there are always cases when you want to allow users to enter html characters.

In our case, passwords are one of those cases. Gordon allows students to have such characters in their passwords, so we need to override the default behavior.

This is the link that helped me figure out how to do it