WebApp Sec mailing list archives

.NET custom Textbox control


From: "Arian J. Evans" <arian () anachronic com>
Date: Wed, 14 Jul 2004 23:41:50 -0500

et al,

For the .NET crowd, here's a nice little custom reusable
Textbox control that will provide automatic HTML encoding
to help mitigate the risk of XSS on user-supplied input
fields: 

http://www.ddj.com/documents/s=9209/ddj20040709asp/

Obviously there are other, better ways to do this like
strongly Typing your data and then calling the .NET
regex validators to enforce type...

But this is still a quick and easy way to get to get
that LCD of webapp vulnerabilities: XSS on unsanitized
user-supplied input fields.

Cheers,

Arian


Current thread: