ASP May Misinterpret Extra or Missing Delimiters as HTML (195243)


The information in this article applies to:

  • Microsoft Internet Information Server 3.0
  • Microsoft Internet Information Server 4.0
This article was previously published under Q195243
We strongly recommend that all users upgrade to Microsoft Internet Information Services (IIS) version 6.0 running on Microsoft Windows Server 2003. IIS 6.0 significantly increases Web infrastructure security. For more information about IIS security-related topics, visit the following Microsoft Web site:

http://www.microsoft.com/technet/security/prodtech/IIS.mspx

SUMMARY

ASP may misinterpret extra or missing delimiters as HTML. ASP does not interpret HTML.

MORE INFORMATION

You should check for extra or missing delimiters if you receive unusual output. A missing delimiter may be misinterpreted as HTML. For example, the following script would be interpreted as HTML: 
   <TABLE WIDTH=100%>

Note that the familiar ASP delimiter is contained within this statement ('%>').

An extra delimiter may also be misinterpreted by ASP. For example: 
   <%SCRIPT LANGUAGE = "VBScript"%> %>

ASP interprets the above line as "SCRIPT LANGUAGE = "VBSCRIPT"%>" because that is what is between the delimiters.
Modification Type:MinorLast Reviewed:6/22/2005
Keywords:kbinfo KB195243
©2004 Microsoft Corporation. All rights reserved.