Thursday, August 28, 2008

Preventing XSS in server code in .aspx files using AntiXss


Preventing XSS in server code in .aspx files using AntiXss:

_someID=
      <%=Microsoft.Security.Application.AntiXss.HtmlEncode(Request.Form["someID"])%>


Note that you need to specify fully qualified assembly name for the AntiXss.

No comments: