Hi there. I have trawled around looking for an answer and did not quite find what I was looking for.
I am creating an ASP.NET application that will will connect to different databases based on which site the user came from. For example, User A followed a link on Foo's site and therefore my application's database connection string will point to Foo's inventory database. But I do not control Foo's site and the sites are sometimes static HTML, PHP, etc.
How can I securely identify the user and not expose an XSS vulnerability?
Thank you for any information you may have. ...
Go to the complete details ...