★ To prevent cross-site scripting (XSS) attacks on your ASP.NET - TopicsExpress



          

★ To prevent cross-site scripting (XSS) attacks on your ASP.NET MVC application: i) Disable request validation through use of the ValidateInput attribute. This attribute will falsely reject valid HTML input. ii) Add Html.Encode for all user input data that is displayed, whether immediately rendered or the data is put into the database and then displayed later. iii) Set the HttpOnly flag on cookies. This will prevent JavaScript from reading and sending cookies.
Posted on: Sat, 29 Jun 2013 08:03:08 +0000

Trending Topics



Recently Viewed Topics




© 2015