Click here to Skip to main content
15,887,214 members
Home / Discussions / ASP.NET
   

ASP.NET

 
AnswerRe: Dropdownlist without autopostback Pin
eyeseetee1-May-08 22:31
eyeseetee1-May-08 22:31 
GeneralRe: Dropdownlist without autopostback Pin
raushan_91-May-08 22:35
raushan_91-May-08 22:35 
GeneralRe: Dropdownlist without autopostback Pin
eyeseetee1-May-08 22:43
eyeseetee1-May-08 22:43 
QuestionReg creating custom layout pages in sharepoint portal Pin
manikandanid1-May-08 20:01
manikandanid1-May-08 20:01 
AnswerRe: Reg creating custom layout pages in sharepoint portal Pin
Vasudevan Deepak Kumar1-May-08 21:12
Vasudevan Deepak Kumar1-May-08 21:12 
QuestionResource file nightmare Pin
Christian Graus1-May-08 18:21
protectorChristian Graus1-May-08 18:21 
AnswerRe: Resource file nightmare Pin
Christian Graus1-May-08 19:31
protectorChristian Graus1-May-08 19:31 
QuestionCrosssite Scripting [modified] Pin
dan!sh 1-May-08 18:04
professional dan!sh 1-May-08 18:04 
I am using server variables in the code like:

Response.Write("Some text" & Request.ServerVariables("Somevariable"))

During code review, it was put under vulnerability(Cross site scripting).
I have thought of two solutions for this

1. Create a list of valid URLs and put a check to verify noone has manipulated it.
2. Create a funtion to strip out potential CSS hacks. It will remove characters like '<','>','\r','\n' etc.

Which solution should I stick to? Or is there any other better solution to this?
Will the solution be able to remove response splitting vulnerability as well?

My idea of ideal life : Eat, Sleep, Repeat

modified on Friday, May 2, 2008 2:40 AM

AnswerRe: Crosssite Scripting Pin
Vasudevan Deepak Kumar1-May-08 21:13
Vasudevan Deepak Kumar1-May-08 21:13 
QuestionUnable to find an entry point named 'FreeCredentialsHandle' in DLL 'security.Dll' Pin
c#ivan1-May-08 10:56
c#ivan1-May-08 10:56 
AnswerRe: Unable to find an entry point named 'FreeCredentialsHandle' in DLL 'security.Dll' Pin
Vasudevan Deepak Kumar1-May-08 21:14
Vasudevan Deepak Kumar1-May-08 21:14 
GeneralRe: Unable to find an entry point named 'FreeCredentialsHandle' in DLL 'security.Dll' Pin
c#ivan2-May-08 0:29
c#ivan2-May-08 0:29 
Question[Message Deleted] Pin
newbcoder1-May-08 10:35
newbcoder1-May-08 10:35 
AnswerRe: logout problem Pin
Christian Graus1-May-08 11:54
protectorChristian Graus1-May-08 11:54 
AnswerRe: logout problem Pin
N a v a n e e t h1-May-08 16:42
N a v a n e e t h1-May-08 16:42 
QuestionForum packages? Pin
pankazmittal1-May-08 10:26
pankazmittal1-May-08 10:26 
AnswerRe: Forum packages? Pin
Vasudevan Deepak Kumar1-May-08 21:14
Vasudevan Deepak Kumar1-May-08 21:14 
GeneralRe: Forum packages? Pin
pankazmittal2-May-08 3:34
pankazmittal2-May-08 3:34 
QuestionRestrict open in file download prompt Pin
Kschuler1-May-08 10:01
Kschuler1-May-08 10:01 
AnswerRe: Restrict open in file download prompt Pin
SomeGuyThatIsMe1-May-08 10:34
SomeGuyThatIsMe1-May-08 10:34 
AnswerRe: Restrict open in file download prompt Pin
Vasudevan Deepak Kumar1-May-08 21:15
Vasudevan Deepak Kumar1-May-08 21:15 
Questionproblem regarding thumbnail generation. Pin
Iunknown1-May-08 8:24
Iunknown1-May-08 8:24 
AnswerRe: problem regarding thumbnail generation. Pin
SomeGuyThatIsMe1-May-08 10:22
SomeGuyThatIsMe1-May-08 10:22 
QuestionAny body create a web page for university grading system Pin
Raghav121231-May-08 4:10
Raghav121231-May-08 4:10 
AnswerRe: Any body create a web page for university grading system Pin
eyeseetee1-May-08 4:50
eyeseetee1-May-08 4:50 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.