Hello to everyone..
Im new in web programing and did several web application in ASP.NET 2.0 using Visual Studio 2005 and C# lang.
I currently doing seminar paper about security issues in web application written by ASP.NET 2.0 technology.
I did a little reasearch and found a lot of staff about XSS and how to defend from it. I also found and article form ProCheckUp how to bypass .net Validate Request for XSS injection.
<~/XSS/*-*/STYLE=xss:e/**/xpression(alert('XSS'))>
By using this script they are able to baypase ValidateRequest filter rule..inside test.aspx web page with one html text box and submit button.
Im trying to test can this mentioned script be injected and executed inisde gridview control. First
I created a simple page that accepts a name and some text from a user and
stores that information in a database. When the page is rendered, it displays
the previous posts in a grid at the top of the page.(simple web forum). When ...
Go to the complete details ...