Comment Feed for Channel 9 - Anti-XSS Library v3.1: Find, Fix, and Verify Errors http://ecn.channel9.msdn.com/o9/previewImages/100/493696_100x75.jpg Channel 9 - Anti-XSS Library v3.1: Find, Fix, and Verify Errors Anil Revuru (RV) from Microsoft Information Security, gives a demonstration of the new features on the Anti-XSS Library v3.1  including HTML Sanitization which provides new methods to the Anti-XSS class to strip malicious characters or scripts off of HTML and returns safe HTML.He talks about: What is Cross-Site Scripting Attack (XSS) How to detect Cross Site Scripting Vulnerabilities Introduction of Anti-XSS Library What’s new in Anti-XSS Library 3.1 Anti-XSS 3.1 demo Security Runtime Engine (SRE) SRE Demo To learn more about this application and stay up to date on the latest news, read the following blogs from Information Security and previous posts from the Security Tools Team blog.Overview of the Anti-XSS LibraryDownload: Microsoft Anti-Cross Site Scripting Library v3.1 en Wed, 19 Jun 2013 02:41:58 GMT Wed, 19 Jun 2013 02:41:58 GMT Rev9 Re: Anti-XSS Library v3.1: Find, Fix, and Verify Errors I get an error message when I tried to play the video:

Media Failure. Try reloading the page or visiting the main site for assistance.

I tried reloading the page without success.

posted by Tavis

]]> http://channel9.msdn.com/Blogs/Jossie/Anti-XSS-Library-v31-Find-Fix-and-Verify-Errors#c633934603540000000 Tue, 10 Nov 2009 14:32:34 GMT http://channel9.msdn.com/Blogs/Jossie/Anti-XSS-Library-v31-Find-Fix-and-Verify-Errors#c633934603540000000 Tavis Re: Anti-XSS Library v3.1: Find, Fix, and Verify Errors Hi Tavis, try playing the video now. Usually it is not the video but the site. When you see that message come back to the video later and it tends to be fixed. It worked for me now. Let me know!

posted by Jossie

]]> http://channel9.msdn.com/Blogs/Jossie/Anti-XSS-Library-v31-Find-Fix-and-Verify-Errors#c633935587900000000 Wed, 11 Nov 2009 17:53:10 GMT http://channel9.msdn.com/Blogs/Jossie/Anti-XSS-Library-v31-Find-Fix-and-Verify-Errors#c633935587900000000 Jossie Re: Anti-XSS Library v3.1: Find, Fix, and Verify Errors Thanks for the demo.. This is really very informative..

posted by SrinivasG

]]> http://channel9.msdn.com/Blogs/Jossie/Anti-XSS-Library-v31-Find-Fix-and-Verify-Errors#c633936240830000000 Thu, 12 Nov 2009 12:01:23 GMT http://channel9.msdn.com/Blogs/Jossie/Anti-XSS-Library-v31-Find-Fix-and-Verify-Errors#c633936240830000000 SrinivasG Re: Anti-XSS Library v3.1: Find, Fix, and Verify Errors Thanks a lot! Very informative.

posted by ramaraju.r

]]> http://channel9.msdn.com/Blogs/Jossie/Anti-XSS-Library-v31-Find-Fix-and-Verify-Errors#c633939406270000000 Mon, 16 Nov 2009 03:57:07 GMT http://channel9.msdn.com/Blogs/Jossie/Anti-XSS-Library-v31-Find-Fix-and-Verify-Errors#c633939406270000000 ramaraju.r Re: Anti-XSS Library v3.1: Find, Fix, and Verify Errors It sure would be nice to have the usual controls for this presentation (stop/start/rewind)

posted by Elroy Flynn

]]> http://channel9.msdn.com/Blogs/Jossie/Anti-XSS-Library-v31-Find-Fix-and-Verify-Errors#c633947201580000000 Wed, 25 Nov 2009 04:29:18 GMT http://channel9.msdn.com/Blogs/Jossie/Anti-XSS-Library-v31-Find-Fix-and-Verify-Errors#c633947201580000000 Elroy Flynn Re: Anti-XSS Library v3.1: Find, Fix, and Verify Errors Informative, as everyone said...but got no sound!! Can any one help me out? Sometimes media player is opened, after the completion of down load, i am asked to download some codec to run!!..

posted by Rasha

]]> http://channel9.msdn.com/Blogs/Jossie/Anti-XSS-Library-v31-Find-Fix-and-Verify-Errors#c633975681240000000 Mon, 28 Dec 2009 03:35:24 GMT http://channel9.msdn.com/Blogs/Jossie/Anti-XSS-Library-v31-Find-Fix-and-Verify-Errors#c633975681240000000 Rasha Re: Anti-XSS Library v3.1: Find, Fix, and Verify Errors Thanks for posting this presentation.

Bad news:  Sound for this slideshow won't play in Silverlight 3.0.50106.0 (from silverlight.net) in IE 8.0.6001.1870 and FF 3.6, Win XP SP3 + all updates, AMD Sempron 1.8GHz.  I don't think it's a CPU issue, because other videos do play with sound, such as this one uploaded by Jossie on the same day (Sept. 23, 2009):  http://channel9.msdn.com/posts/Jossie/Connected-Information-Security-Framework-Core-Components/ and  http://channel9.msdn.com/posts/Jossie/Technical-Preview-for-CATNET-20/

Good news, workaround: copying the URL from the embed HTML ( < /> icon) and pasting it into Windows Media Player 11 "Open URL",  the video+audio streams perfectly:

   http://ecn.channel9.msdn.com/o9/ch9/6/9/6/3/9/4/antiXSS31_ch9.wmv

The trouble?: WMP11 says the audio codec is: "Windows Media Audio 10 Professional, 128 kbps, 44 kHz, 2 channel 24 bit 2-pass VBR".  24 bits seems like overkill for a voiceover, and Silverlight 3.0 won't play it. (Or is it a container problem?) 

Suggestion:  In future, encode audio for WMA 9 and/or 16 bit for maximum backward compatibility.

 

 

posted by f.hausman

]]> http://channel9.msdn.com/Blogs/Jossie/Anti-XSS-Library-v31-Find-Fix-and-Verify-Errors#c633999407090000000 Sun, 24 Jan 2010 14:38:29 GMT http://channel9.msdn.com/Blogs/Jossie/Anti-XSS-Library-v31-Find-Fix-and-Verify-Errors#c633999407090000000 f.hausman Re: Anti-XSS Library v3.1: Find, Fix, and Verify Errors Can I  use this on classic ASP applications? Please point me to a right article or video if we can?

 

Thanks,

Kumar Pindiprolu.

posted by kumaratwin

]]> http://channel9.msdn.com/Blogs/Jossie/Anti-XSS-Library-v31-Find-Fix-and-Verify-Errors#c634109962280000000 Tue, 01 Jun 2010 13:37:08 GMT http://channel9.msdn.com/Blogs/Jossie/Anti-XSS-Library-v31-Find-Fix-and-Verify-Errors#c634109962280000000 kumaratwin Re: Anti-XSS Library v3.1: Find, Fix, and Verify Errors Unfortunately both Anti-XSS library and CAT.NET work on mangaed code. It can't be used with classic ASP applications.

posted by anilkr

]]> http://channel9.msdn.com/Blogs/Jossie/Anti-XSS-Library-v31-Find-Fix-and-Verify-Errors#c634181783480000000 Mon, 23 Aug 2010 16:39:08 GMT http://channel9.msdn.com/Blogs/Jossie/Anti-XSS-Library-v31-Find-Fix-and-Verify-Errors#c634181783480000000 anilkr