You can also use the
FilteredTextBoxEntender
from the
AjaxControlToolkit
.
Then set following properties of the FilteredTextBoxExtender
FilterMode = Custom<br />
FilterType = InvalidChars<br />
InvalidChars = '"
(without commas else comma will also be considered invalid.)