AspDotNetAtoms.com provides daily updates on ASP.NET Tutorials, Programming Resources, .NET Articles, Authors and more.

Categories

Recent Posts

Cross-Site Scripting in ASP.NET : SandeepReddy Pasham

Thursday, October 02 2008

Cross-site scripting attacks exploit vulnerabilities in Web page validation by injecting client-side script code. The script code embeds itself in response data, which is sent back to an unsuspecting user. The user's browser then runs the script code. Because the browser downloads the script code from a trusted site, the browser has no way of recognizing that the code is not legitimate, and Microsoft Internet Explorer security zones provide no defense. Cross-site scripting attacks also work over HTTP and HTTPS (SSL) connections.

Read More:
Cross-Site Scripting in ASP.NET : SandeepReddy Pasham
Also See:
Basic Reporting Part 3: Programmatically Setting the ObjectDataSource's Parameter Values : Scott Mitchell
Handling Files and Directories from your web applications. : Rockin J
ASP.NET MVC Tip #10 - Prevent URL Manipulation Attacks : Stephen Walther on ASP.NET MVC
Securing .NET code : Mark S. Rasmussen
Updated: Implement Kerberos Delegation for Windows 2000 : ASP.NET Whitepapers

Post your comment

Comment