I have a form where the user inputs data.
On the back end, I'm taking some of that data and embedding it into a PDF using ActiveReports. I then display it back to the user and save a copy on our server.
I am using C# and ASP.NET
I feel like I should be scrubbing this input somehow, but I'm not sure what to look for in terms of what is malicious to a PDF file or how to effectively sanitize the data; I don't think I can encode it like I do for HTML.
How can I best sanitize this data to prepare it for the PDF file?