WebApp Sec mailing list archives
.NET custom Textbox control
From: "Arian J. Evans" <arian () anachronic com>
Date: Wed, 14 Jul 2004 23:41:50 -0500
et al, For the .NET crowd, here's a nice little custom reusable Textbox control that will provide automatic HTML encoding to help mitigate the risk of XSS on user-supplied input fields: http://www.ddj.com/documents/s=9209/ddj20040709asp/ Obviously there are other, better ways to do this like strongly Typing your data and then calling the .NET regex validators to enforce type... But this is still a quick and easy way to get to get that LCD of webapp vulnerabilities: XSS on unsanitized user-supplied input fields. Cheers, Arian
Current thread:
- Problems with IIS Marcelo Leão Caffaro (Jul 14)
- Re: Problems with IIS Burak DAYIOGLU (Jul 14)
- Re: Problems with IIS Mark Burnett (Jul 14)
- .NET custom Textbox control Arian J. Evans (Jul 16)
- Re: Problems with IIS Roshen Chandran (Jul 15)
- Re: Problems with IIS Roshen Chandran (Jul 15)
- RE: Problems with IIS Dinis Cruz (Jul 15)
- RE: Problems with IIS Frank Knobbe (Jul 16)
- <Possible follow-ups>
- RE: Problems with IIS sk3tch (Jul 14)
- RE: Problems with IIS Marcelo Villalón Mendez (Jul 15)
- RE: Problems with IIS Stan Guzik (Jul 16)
- RE: Problems with IIS Dinis Cruz (Aug 11)
- RE: Problems with IIS Andrew van der Stock (Aug 11)