File tree Expand file tree Collapse file tree 1 file changed +2
-6
lines changed
csharp/ql/src/Security Features/CWE-079 Expand file tree Collapse file tree 1 file changed +2
-6
lines changed Original file line number Diff line number Diff line change @@ -13,7 +13,7 @@ without properly sanitizing the input first, allows for a cross-site scripting v
13
13
14
14
<p >
15
15
To guard against cross-site scripting, consider using a library providing suitable encoding
16
- functionality, such as the <code >System.Net.WebUtility</code > class or the AntiXSS library ,
16
+ functionality, such as the <code >System.Net.WebUtility</code > class or the < code > AntiXSS</ code > NuGet package ,
17
17
to sanitize the untrusted input before writing it to the page.
18
18
The references also mention other possible solutions.
19
19
</p >
@@ -31,13 +31,9 @@ Sanitizing the user-controlled data using <code>WebUtility.HtmlEncode</code> met
31
31
</p >
32
32
<sample src =" XSSGood.cs" />
33
33
<p >
34
- Alternatively, the AntiXSS library can be used to sanitize the user-controlled data:
34
+ Alternatively, the < code > AntiXSS</ code > NuGet package can be used to sanitize the user-controlled data:
35
35
</p >
36
36
<sample src =" XSSGood2.cs" />
37
- <p >
38
- Recall that this solution requires the AntiXSS library to be installed, for example by
39
- adding a package reference to the AntiXSS NuGet package to the project file.
40
- </p >
41
37
42
38
</example >
43
39
<references >
You can’t perform that action at this time.
0 commit comments