locked
allowing links to outside pages in asp.net application RRS feed

  • Question

  • User-153404742 posted

    Hi,

    I'm not sure if there's a setting for this to be turned on but microsoft probably prevents this for safety of cross-site scripting.  We have a table where values of varchar can be entered and we are allowing <a href> links to outside pages to be added.  However, the links don't take us to outside pages.  Is there a way to allow this ?  We want to keep a whitelist table where if the link is within that whitelist table, then allow it; otherwise not?  Thanks for any ideas.  

    Thursday, April 26, 2018 5:50 PM

All replies

  • User475983607 posted

    inkaln

    I'm not sure if there's a setting for this to be turned on but microsoft probably prevents this for safety of cross-site scripting.  We have a table where values of varchar can be entered and we are allowing <a href> links to outside pages to be added.

    This is either a bug in the application or a restriction set by your network team.

    However, the links don't take us to outside pages

    Where do the links take you?

    Thursday, April 26, 2018 6:17 PM
  • User-153404742 posted

    it was validating the request but problem solved.  thank you.

    Thursday, April 26, 2018 7:08 PM