Hi,
I'm reading about the anti-xss library and am not sure if I need it. We just have a simple feedback form on our site, and all that it does is send an email. It doesn't do anything with the info but send an email and then it makes the form invisible, and makes a thank you section visible. Is this susceptible?
Also, the only other inputs I can think of is our onsite search, which returns a result page. The search submit just redirects to a search page and puts the text in the query string, so that might be very susceptible.
Response.Redirect("/search.aspx?keyword=" + text_box.Text);
I have the Request Validation config turned on, so I'm not sure if I need anything else, or if I really need the anti-xss library. Maybe I just need to do some simple encoding to be safe. I'm looking for advice. Thanks for your help. -Ron
I put a piece of javascript in the site ...
Go to the complete details ...