Return to HomePage

---

Cross-Site Scripting Lab Modules

The cross-site scripting lab modules show you how to protect from cross-site scripting issues.

Contents

* Objectives
* Video
* Lab
* Recommended Guidance
* Feedback

Objectives

* Recognize cross-site scripting vulnerabilities.
* Encode untrusted output with HtmlEncode.
* Validate input with a regular expression.
* Use ASP.NET’s built-in cross-site scripting protection mechanism.

Video

The video is a small wmv file download:
* Video Demonstration Cross Site Scripting

Lab

The lab is small zip that you need to extract to see the example code:
* Lab Project Files CrossSiteScriptingLab.zip

Recommended Guidance

* How To: Prevent Cross-Site Scripting in ASP.NET
* How To: Protect From Injection Attacks in ASP.NET
* How To: Use Regular Expressions to Constrain Input in ASP.NET
* Design Guidelines for Secure Web Applications (See "Input Validation" section)
* Architecture and Design Review for Security (See "Input Validation" section)
* Security Guidelines: ASP.NET 2.0 (See "Input and Data Validation" section)

Feedback

* Send mail to labmods at microsoft.com

---

Return to HomePage