A security scan of an ASP.NET web site we are developing reported the following on an input field used