I have a regular expression attribute to validate the user input against
</
</
<span id="CurrentPassword-error">The following values are not allowed (<!--)--></span>
You can use an HTML encoder for special characters:
< = <
> = >
<span id="CurrentPassword-error">The following values are not allowed (<!--)--></span>