« The Palin Hack: Why most question recovery systems suck | Main | Mark Russinovich on the Future of Security »

Fxcop HtmlSpotter - Spotting ASP.NET XSS using Fxcop and Html encoding document

An anonymous user writes "In his previous blog post, Sacha provided an updated list of the asp.net control html encoding information. He now integrated the content into FXCop to help quickly identify spots in asp.net binaries that should be reviewed for XSS issues."

Read more: http://blogs.msdn.com/sfaust/archive/2008/09/18/fxcop-htmlspotter-spotting-asp-net-xss-using-fxcop-and-html-encoding-document.aspx


Feed You can follow this conversation by subscribing to the comment feed for this post.

All Comments are Moderated and will be delayed!

the text was decrypted properly by examining which error code was returned by the web server,