KB195243 - ASP May Misinterpret Extra or Missing Delimiters as HTML

Article ID: 195243

Article Last Modified on 6/22/2005

Microsoft Internet Information Server 3.0
Microsoft Internet Information Server 4.0

This article was previously published under Q195243

We strongly recommend that all users upgrade to Microsoft Internet Information Services (IIS) version 6.0 running on Microsoft Windows Server 2003. IIS 6.0 significantly increases Web infrastructure security. For more information about IIS security-related topics, visit the following Microsoft Web site:

http://www.microsoft.com/technet/security/prodtech/IIS.mspx

SUMMARY

ASP may misinterpret extra or missing delimiters as HTML. ASP does not interpret HTML.

MORE INFORMATION

You should check for extra or missing delimiters if you receive unusual output. A missing delimiter may be misinterpreted as HTML. For example, the following script would be interpreted as HTML:

   <TABLE WIDTH=100%>

Note that the familiar ASP delimiter is contained within this statement ('%>').

An extra delimiter may also be misinterpreted by ASP. For example:

   <%SCRIPT LANGUAGE = "VBScript"%> %>

ASP interprets the above line as "SCRIPT LANGUAGE = "VBSCRIPT"%>" because that is what is between the delimiters.

Keywords: kbinfo KB195243