小编Tuğ*_*rul的帖子

  Regex r = new Regex("([sS][cC][rR][iI][pP][tT])|([sS][qQ][lL])|(<%=)");

没有找到任何<%=出现但正确找到SqL,SQL,sQL,脚本,ScRipT ......

我究竟做错了什么？

  [\<]  gives escape unrecognized error. Just as [\%] do.

示例字符串:

   Injection protection test:
   <script> alert('fail'); 
   </script> 
   <asp:SqlDataSource runat="server"></asp:SqlDataSource>
   <%= Server.Rewrite( ....) %>