0

我试图找出是否有办法避免让 ASP.NET 的正则表达式验证使用 JavaScript 来呈现用作客户端验证的正则表达式。避免这种事情的原因是防止用户猜测表单的算法来确定数据是否有效。

<asp:RegularExpressionValidator id="vldEmail" runat="server"
     ErrorMessage="This email is missing the @ symbol."
     ValidationExpression=".+@.+" ControlToValidate="txtEmail"></asp:RegularExpressionValidator>
</asp:Content>

JavaScript 展示了正则表达式算法。 

//<![CDATA[
    var ContentPlaceHolder1_vldEmail = document.all ? document.all["ContentPlaceHolder1_vldEmail"] : document.getElementById("ContentPlaceHolder1_vldEmail");
    ContentPlaceHolder1_vldEmail.controltovalidate = "ContentPlaceHolder1_txtEmail";
    ContentPlaceHolder1_vldEmail.errormessage = "This email is missing the @ symbol.";
    ContentPlaceHolder1_vldEmail.evaluationfunction = "RegularExpressionValidatorEvaluateIsValid";
    ContentPlaceHolder1_vldEmail.validationexpression = ".+@.+";
    //]]>
4

1 回答 1

1

将 EnableClientScript 设置为 false。这将阻止脚本在客户端上呈现。

于 2013-05-13T18:42:21.103 回答