What should be done to avoid Script Injection?

Posted by Virendradugar on 12/29/2009 | Category: ASP.NET Interview questions | Views: 3116

Post |

Interview FAQs |

Exclusive Questions |

Interview Home

Answer:

To avoid script injection, following things can be done

1. Don't allow user to enter < and > characters as input.
2. Always Encode user's input and then store in the database.

Asked In: Many Interviews | Alert Moderator

Bookmark It

< Previous : Tell us the different ways to apply CSS in web pag ...

Next > : What you should do to avoid SQL Injection?

Comments or Responses

More Interview Questions by Virendradugar

What you should do to avoid SQL Injection?
What are the different type of selectors in Jquery?
What is the difference between specifying css class with # and .? i.e. ...
Can you specify more than one css class for any HTML element?
What are the common security threats for any asp.net application?
display and visibility properties are used to hide and show elements i ...
What is the default value of "position" attribute in css?
What are the values of "Position" attribute in CSS?

Latest Interview Questions

int? d = 1; Type testType = d.GetType(); will result…
Limitation of boxing nullable type.
How can you make your machine shutdown from your program?
DetailsView and FormView - Which is better?
What is DetailsView?
is there any event "ModeChanged"?
How can you cancel update/cancel of gridview ?
For gridview, data-binding expressions are resolved at,…
More ...