Fixing Cross-site Scripting in ASP.NET
The HtmlEncode() method can be used when displaying text directly inside HTML tags using block:
<% = Microsoft.Security.Application.AntiXss.HtmlEncode(this.txtName.Text) %>
Quick Links
- .NET (5)
- ASP (5)
- Cross-Site Request Forgery (1)
- Cross-Site Scripting (3)
- Data Breaches (1)
- Databases (9)
- Frameworks (1)
- IBM AS/400 (2)
- Input Validation (14)
- Insecure Cryptographic Storage (1)
- Java (6)
- JSP (2)
- KRACK (1)
- Languages (20)
- MAC Address Filtering (1)
- MSSQL (4)
- MySQL (1)
- Office Events (1)
- Oracle (4)
- Phishing Attacks (1)
- PHP (6)
- Recommendations (18)
- Red Team (1)
- Redirect Abuse (1)
- Security Attacks (16)
- Security Audit (2)
- Spring MVC (1)
- SQL Injection (11)
- SSID (2)
- Weekly Cyber Security News (7)
- Wireless (7)
- WPA (1)
- WPA2 (1)
- February 2019 (1)
- September 2018 (3)
- August 2018 (5)
- July 2018 (3)
- October 2017 (1)
- March 2014 (2)
- December 2012 (3)
- May 2012 (12)
- May 2011 (16)
One thought on “Fixing Cross-site Scripting in ASP.NET”