Return to Click to read this topic

Cross-Site Scripting Lab Modules

The cross-site scripting lab modules show you how to protect from cross-site scripting issues.

Contents

• Objectives
• Video
• Lab
• Recommended Guidance
• Feedback

Objectives

• Recognize cross-site scripting vulnerabilities.
• Encode untrusted output with HtmlEncode.
• Validate input with a regular expression.
• Use ASP.NET’s built-in cross-site scripting protection mechanism.

Video

The video is a small wmv file download:

• Video Demonstration Cross Site Scripting

Lab

The lab is small zip that you need to extract to see the example code:

• Lab Project Files CrossSiteScriptingLab.zip

Recommended Guidance

• How To: Prevent Cross-Site Scripting in ASP.NET
• How To: Protect From Injection Attacks in ASP.NET
• How To: Use Regular Expressions to Constrain Input in ASP.NET
• Design Guidelines for Secure Web Applications (See "Input Validation" section)
• Architecture and Design Review for Security (See "Input Validation" section)
• Security Guidelines: ASP.NET 2.0 (See "Input and Data Validation" section)

Feedback

• Send mail to labmods at microsoft.com

Return to Click to read this topic