When you say that you added " several asp.net forms" does that mean pages that exists outside of DNN but live in the same install directory? If so, you are going to have to do the work yourself, as DNN doesn't know about them.

You also said "custom modules" which I assume are not DNN modules?

The "better" way to do this would be to put the forms in HTML or razor modules which could then be added to pages. If you do this you will need to so some slight editing of your "forms" so that they can exist inside of DNN. A good place to start is the " oldie but goodie" blog post:https://mitchelsellers.co...submissions-from-dnn

Sorry for the confusion, No, we created DNN modules directly on the server in the desktop modules folder and simply copied the asp.net forms html and code into the ascx files.
By custom forms we meant that we did not use any module template in visual studio etc.

The forms are working inside DNN modules,  but is just the Cross scripting we are asking about , apart from sticking a regular expression validator on each text box and using HTML encode in the back end,  is there a simple wrapper or in code to allow these modules to pick up on the antiXSS measures used for example in the HTML Module.

Are there form tags in your html?

Stuart,

best solution would be to use any of the form modules available and re-create your forms with one of the modules. There are some good solutions available in the DNN Store (https://store.dnnsoftware...2?searchtext=forms), but also free stuff like OpenForms (https://github.com/sachatrauwaen/openform).

Happy DNNing!
Michael

Hi Joe, no form tags,  the forms are working perfectly within the DNN modules.

Michael, Some of the forms are not that simple, fairly lengthy and involve criteria testing with sections hidden or displayed accordingly. At this point, we do not have time to learn a new form module enough to recreate the forms as they are temporary, although we will look at some of the options mentioned for future use.

We just wondered if there was a programmatic way to plug in the page Request Validation or the .Net 4.5 XssSecurity