AntiXssModule encodes by default

Sep 29, 2010 at 11:30 AM

I have a page with an asp:grid on it.  The grid is not in the list of controls configured for encoding, yet the grid columns get encoded, so I'm seeing double-encoding.  Even if I put an empty control list in antixssmodule.config it still gets encoded.  I easily fixed it by excluding that page in the config file, but it seems like incorrect behavior.

Sep 29, 2010 at 3:49 PM

That is weird; the columns may be deriving from a control which gets encoded. Have you tried using the exclusion attribute on the grid declaration?