Showing posts with label Security. Show all posts
Showing posts with label Security. Show all posts

Sunday, April 08, 2012

“267: The directory name is invalid” error when running via runas command

Should be one of:

  • User Access Control settings prevent you from executing a program
  • Directory has no access for user which is specified in runas
  • You shared your folder and that reset user rights on the folder –
    go to Properties->Security and add runas user..

Thursday, August 28, 2008

Enable XSS Detect in VS 2008


XSS Detect is a code-analysis tool proposed, as suggested by its name, for reveal of XSS vulnerabilities in web-applications.
It's developed by MS ACE Team and could be downloaded here: XSS Detect

The problem is that out of the box it works in VS 2005 only. Here is how to enable it in Visual Studio 2008:
  1. Open %USERPROFILE%\Application Data\Microsoft\MSEnvShared\Addins

  2. Insert < Version > 9.0 < /Version > in HostApplication section


Preventing XSS in server code in .aspx files using AntiXss


Preventing XSS in server code in .aspx files using AntiXss:

_someID=
      <%=Microsoft.Security.Application.AntiXss.HtmlEncode(Request.Form["someID"])%>


Note that you need to specify fully qualified assembly name for the AntiXss.