How to restrick the script tag in URL cross site scripting

 Active the requestFiltering utility in IIS then put the below tag for  re-stick the script tag in URL

 <system.webServer>
<security>
      <requestFiltering>
        <denyQueryStringSequences>
          <add sequence="&gt;" />
          <add sequence="&lt;" />
        </denyQueryStringSequences>
      </requestFiltering>
    </security>
  </system.webServer>

Give URL path in GridView

URL path in GridView

NavigateUrl='<%# Eval("CRMLeadID", "~/Onlinedocument.aspx?crmleadid={0}") %>'

NavigateUrl='<%# string.Format("~/Onlinedocument.aspx?crmleadId={0}",Eval("Id").ToString()) %>'