So, whenever you are using Html.Raw(), be absolutely certain that the data you are outputting could ... otherwise you will be prone to cross-site scripting.
確定! 回上一頁