Hi,

Look for this in SearchResults.aspx

<NeatHtml:UntrustedContent ID="UntrustedContent1" runat="server" TrustedImageUrlPattern='<%# mojoPortal.Web.Framework.SecurityHelper.RegexRelativeImageUrlPatern %>' ClientScriptUrl="~/ClientScript/NeatHtml.js">
                    <%# SecurityHelper.PreventCrossSiteScripting(DataBinder.Eval(Container.DataItem, "Intro").ToString()) %>
                    </NeatHtml:UntrustedContent>

change it like this:

<NeatHtml:UntrustedContent ID="UntrustedContent1" runat="server" TrustedImageUrlPattern='<%# mojoPortal.Web.Framework.SecurityHelper.RegexRelativeImageUrlPatern %>' ClientScriptUrl="~/ClientScript/NeatHtml.js">
                    <%# DataBinder.Eval(Container.DataItem, "Intro").ToString() %>
                    </NeatHtml:UntrustedContent>

The NeatHtml:UntrustedContent already protects us from XSS, so this extra method SecurityHelper.PreventCrossSiteScripting is redundant from a previous implementation and it is what shows the red message. I am making the same change in my copy.

Best,

Joe