Script Attack

Question

How would you stop users to post script or any other malicious tags to your site before postback, Also I don't want to use javascript for that.

Thanks