linq - Storing Google map iframe to ASP.net MVC Application without security risks -


i have mvc3 web application has place input google map address, there security risk, xss.

google map address contains iframe element , can't use antixss library sanitize input. forced turn off validation due accept form data @ controller action too.

but how secure part of application?

any idea perhaps technically useful. before.

we need black-list using iframe due control input.

an easy way latitude , longitude input variables api. using them below:

<script type="text/javascript" src="http://maps.google.com/maps/api/js?sensor=false"></script> <script type="text/javascript">     function initialize() {         var latlng = new google.maps.latlng(-34.397, 150.644);         var myoptions = {             zoom: 8,             center: latlng,             maptypeid: google.maps.maptypeid.roadmap         };         var map = new google.maps.map(document.getelementbyid("map_canvas"), myoptions);     }   </script> 

or using more useful this resource.


Comments

Popular posts from this blog

javascript - DIV "hiding" when changing dropdown value -

Does Firefox offer AppleScript support to get URL of windows? -

android - How to install packaged app on Firefox for mobile? -