WebApp Sec: ASP security in HTML pages

[Bénoni MARTIN <Benoni.MARTIN () libertis ga>]

Hi list,

I have been googling around to know how secure can be ASP code, and I found what follows:
- For a newbee, impossible to get the asp scripts inserted in an HTML page as they are not displayed in the client's 
browser,
- Instead of just letting the ASP code in the HTML pages, we can create some DLLs for example, but a not-to-bad skilled 
hacker can get and reverse them.

So, my question to you, skilled-people :) is: is there a way to get the asp scripts in a page the server does not send 
when a client's request arrives? There should be a way to ^perform that, but how tough is it?

Thanks in advance, folks!