antixsslibrary
why does MS anti xss library (v4) remove html 5 data attributes
AntiXss library seems to strip out html 5 data attributes, does anyone know why? I need to retain this input:[详细]
2023-02-18 03:36 分类:问答Anti-XSS library - Use with ASP .Net website (vs. web application)?
The results of a security audit revealed that our site 开发者_运维知识库may be vulnerable to XSS attacks.Currently the only protection we have against this is by using the default ValidateRequest=\"tr[详细]
2023-01-29 02:01 分类:问答How to get Microsoft's AntiXss library to URLEncode to the URI standard (RFC3986) instead of an IRI (RFC3987)?
I\'m using the Microsoft AntiXss 3.1 library. We have a number of international sites which use non-Latin scripts. We\'re using SEO-friendly URL\'s, so we have non-ASCII characters that end up in the[详细]
2023-01-21 12:24 分类:问答How vunerable to XSS attacks is Flash?
The reason why I ask is th开发者_运维问答at I\'m telling a vendor of ours they have to use the MS AntiXSS library with the ASP.NET UI components they make, but they also work with Flex to build Flash[详细]
2023-01-19 16:44 分类:问答AntiXss.UrlEncode vs. AntiXss.HtmlAttributeEncode usage in link (a href)
According to old AntiXss article on MSDN AntiXss.UrlEncode is used to encode link href (Untrusted-input in the following example):[详细]
2023-01-12 23:16 分类:问答Anti XSS support in ASP.net Vs AntiXss Lib
How does the XSS (Cross Site Scripting) support pro开发者_运维问答vided by ASP.net differs from AntiXss. AntiXss is a microsoft library for securing your site against XSS. Both API looks almost simila[详细]
2023-01-10 22:49 分类:问答would i need antixss for report printing
I h开发者_JAVA百科ave a report web page that allows you to export records shown to an excel file. I\'m using AntiXss to display them on the screen but when a user opts to export to file and I go and g[详细]
2023-01-07 09:22 分类:问答Fortify and AntiXSS
My company requires our ASP.NET code to pass a Fortify 360 scan before releasing the code. We use AntiXSS everywhere to sanitize HTML output. We also validate input. Unfortunately, they recently chang[详细]
2023-01-07 02:40 分类:问答html agility pack vs antixss
It seems to me jus开发者_Python百科t using the html agility pack would work to prevent xss (parse then get innertext). Would it be repetitive to use antixss after using hap?[详细]
2023-01-05 14:50 分类:问答<%: %> vs Microsoft the anti XSS library
With .net 4 there\'s a new <%: %> script enclosure that\'s like <%= %> but does an html encode.People are encouraging the use of this new syntax.[详细]
2023-01-05 12:34 分类:问答
加载中,请稍侯......