XSS Prevention and Cross Site Scripting Prevention

Question

User-1586556547 posted

Hi,

I am developing an asp.net mvc applcation with angularJS 1.6.

I am trying to implement XSS prevention in my application. I had tried to use angular ng sanitize in my application  but find it not working.

I am looking for simple javascript code snippet to prevent XSS attacks in my application. Can someone help me on this.

Regards,

Ashvin

Answer 1

User839733648 posted

Hi ashvinrs83,

According to your description, one suggestion is that you could search for the "AntiXSS" package in the NuGet package and install it.

After the installation, you will see two new libraries in your projects references folder: AntiXssLibrary and HtmlSantizationLibrary.

Then you could modify the code in the controller simply to prevent XSS.

The key point is to use

Sanitizer.GetSafeHtmlFragment()

For more, you could refer to: 

http://www.dotnet-programming.com/post/2015/04/12/How-to-Handle-Cross-Site-Scripting-in-ASPNET-MVC-Application.aspx

https://documentation.help/Microsoft-AntiXSS/ad19c7b1-35bb-8e92-ab72-51e137046d97.htm

Best Regards,

Jenifer