Comments on: When ASP.NET EventValidation Doesn’t Work http://www.gdssecurity.com/l/b/2009/03/19/when-aspnet-eventvalidation-doesnt-work/ Gotham Digital Science Security Blog Wed, 01 Sep 2010 06:49:07 +0000 http://wordpress.org/?v=abc hourly 1 By: santhana krishnan http://www.gdssecurity.com/l/b/2009/03/19/when-aspnet-eventvalidation-doesnt-work/comment-page-1/#comment-399 santhana krishnan Wed, 14 Jul 2010 11:36:07 +0000 http://www.gdssecurity.com/l/b/?p=80#comment-399 Which method doesn't generate an event? Which method doesn’t generate an event?

]]> By: Jon http://www.gdssecurity.com/l/b/2009/03/19/when-aspnet-eventvalidation-doesnt-work/comment-page-1/#comment-268 Jon Thu, 26 Mar 2009 15:41:05 +0000 http://www.gdssecurity.com/l/b/?p=80#comment-268 I think the main problem here is the inconsistency related to how the eventvalidation gets invoked, it really depends on the event and control that is invoked. Reminds me of MS handling of htmlencoding and attribute encoding in .Net: http://msmvps.com/blogs/calinoiu/archive/2006/06/13/what-s-wrong-with-asp-net-html-encoding.aspx Nice post! I think the main problem here is the inconsistency related to how the eventvalidation gets invoked, it really depends on the event and control that is invoked. Reminds me of MS handling of htmlencoding and attribute encoding in .Net:

http://msmvps.com/blogs/calinoiu/archive/2006/06/13/what-s-wrong-with-asp-net-html-encoding.aspx

Nice post!

]]>