Author: s2002 | Posted on: 6/12/2010 5:38:49 PM | Views : 254

Hi,
I have 2 pages. Page 1 send Querystring value to Page 2 and page 2 use querystring value.
in page 1 I use:         Response.RedirectUrlEncode(("Page2.aspx?q=" &"My Desired Value) )
in Page 2 I Use :        Dim Inputvalue as string = (UrlEncode("request.querystring("q"))
 
I think there is vulnerability in page 2 , and thats when User manally inject some malicious code to address bar.
Now Url is not encoded , but page 2 decode URL. Could any one tell me how to fix it.
 
Regards,
 
...

Go to the complete details ...