Enhanced Web Protection Library

Anil Revuru (RV), from Microsoft Information Security, introduces the expansion of what used to be the Anti-XSS Library. But web vulnerabilities are not only around Cross-Site Scripting (XSS) attacks. This enhanced version of the library will introduce mitigation to other attacks like:

• SQL Injection
• Cross-Site Request Forgery (CSRF)
• Setting Enforcement like SSL & HTTP_ONLY cookies
• Security Runtime Engine for SQL Injection & XSS
• Among others

The CTP (Community Technology Preview) is available in Microsoft Connect – Information Security Tools.

Read CTP announcement and follow the Security Tools Team blog.