lundi 29 juin 2015

Is there a real need in an Anti-XSS in web forms today

Well, my company have a webs site which contains 5 pages of web forms and 2 mvc,

and we were thinking to put the (Microsoft AntiXSS / Web protection) which should protect agiest XSS, but then iv'e read that its a part of the .net 4.5, which means i don't need to put anything to protect myself agiesnt XSS?

In out code behind we check every text box that comes to the server(If its need to be int, then its check to int, if guid, checked to guid). is there any real need to another thing to protect?

Thanks so much.!

Aucun commentaire:

Enregistrer un commentaire