• This topic has 1 reply, 2 voices, and was last updated 9 years ago by Adan.

  • How to deal with cross site scripting threats

    Fierro Member September 24, 2015 at 11:36 am

    I am working on site using C# in ASP.NET. During security audit to to deal with cross site scripting threats ?

    #7881
  • Adan Member September 24, 2015 at 11:37 am 
    LblMsg.Text = HttpUtility.HtmlEncode(msg)

    You need to encode your msg before inserting it into your label. It’s the thing with not trusting user input to your function.

    https://msdn.microsoft.com/en-us/library/73z22y6h(v=vs.110).asp.net for further details.

    #7882
Viewing 1 reply thread
  • You must be logged in to reply to this topic.
en_USEnglish
en_USEnglish