Halo Guys,
To have a better secure application, we have to prevent cross site scripting.
I have application that use a bll.
All inputs have to pass bll before they were pass to database.
To prevent cross site scripting, is bll the correct place to validate the input?
To be exact, are all the properties of object should be validated?
If yes, can anyone enlight me how to validate it?
Thanks in advance.
...
Go to the complete details ...