Browse by Tags

All Tags » Input Validation » Software Security (RSS)
ASP.NET ValidateRequest and the HTML Attribute Based Cross Site Scripting
ASP.NET ValidateRequest is a security mechanism designed to prevent cross-site scripting attacks in ASP.NET applications. It looks at data in the HTTP request parameters, and issues an error if it finds anything that is "suspicious". And, for the most...

Posted by Alex | 2 comment(s)

Input versus Data, Validation versus Sanitization
Reading articles, browsing marketing materials, and listening to presentations about application security, you hear variations on a theme: "Input validation is absolutely critical to application security, and most application risks involve tainted input...

Posted by Alex | with no comments