Html encode
In the ViewDepartment view and the ProductItem partial view I removed the html.encode helper from the description element because the page was diplaying the tags. I know this is used for security reasons. I am thinking because only staff (admin, storekeeper, etc) are entering the product description there shouldn't be that risk. Is there any other reason I should be worried about it? If we aren't displaying html it sort of defeats the purpose of having the html entry box.
|
