
Microsoft Anti-Cross Site Scripting Library V3.1
Brief Description
AntiXSS 3.1 helps you to protect your current applications from cross-site scripting attacks, at the same time helping you to protect your legacy application with its Security Runtime Engine
On This Page
Quick Details
| File Name: | AntiXSSV31.msi |
| Version: | 3.1 |
| Date Published: | 9/15/2009 |
| Language: | English |
| Download Size: | 2.6 MB |
| Estimated Download Time: | 7 min 56K |
Overview
The Microsoft Anti-Cross Site Scripting Library V3.1 (Anti-XSS V3.1) is an encoding library designed to help developers protect their ASP.NET web-based applications from XSS attacks. It differs from most encoding libraries in that it uses the white-listing technique -- sometimes referred to as the principle of inclusions -- to provide protection against XSS attacks. This approach works by first defining a valid or allowable set of characters, and encodes anything outside this set (invalid characters or potential attacks). The white-listing approach provides several advantages over other encoding schemes.
New features in this version of the Microsoft Anti-Cross Site Scripting Library include:
- An expanded white list that supports more languages
- Performance improvements
- Performance data sheets (in the online help)
- Support for Shift_JIS encoding for mobile browsers
- A sample application
- Security Runtime Engine (SRE) HTTP module
- HTML Sanitization methods to strip dangerous HTML scripts
Top of page
System Requirements
- Supported Operating Systems: Windows 2000; Windows Server 2003; Windows Server 2008; Windows Vista; Windows XP; Windows XP 64-bit
OS: Microsoft Windows
Software: .NET Framework 2.0
Top of page
Instructions
1. Download the file by clicking on the "Download" button.
2. Select "Save” and specify a directory on your local disk.
3. Install the package by running the self-extracting executable file. This will create a directory structure containing the library and samples.
Top of page
What Others Are Downloading
Top of page