Take Charge of Your Security
Posted by: youve been HAACKED,
on 08 Feb 2009 |
View original | Bookmarked: 0 time(s)
Today I read something where someone was comparing Web Forms to ASP.NET MVC and suggested that Web Forms does a lot more than ASP.NET MVC to protect your site from malicious attacks. One example cited was that Server controls automatically handled HTML encoding so you dont have to really think about it. The idea here is that Web Forms automatically protects you from XSS attacks. My friends, Im afraid this is just not true. Take a look at the following page code. <%@ Page Language="C#"...