Validate ASP.NET Page

Question

I want to validate my page to prevent HTML Injection attacks.

Some viruses, trojans etc. can detect and inject some code to your web site. And this can cause design of your web site can change or some malicious codes can be injected.

How can I validate my page is really my page that I create from server?

I don't try anything now. I just want to give some advice about it. I just think to keep my page structure somewhere and check it from there. If you have better idea, please share it :) — Dogukan Demir
– Dogukan Demir, Commented Oct 7, 2013 at 8:43

Vano Maisuradze · Accepted Answer · 2013-10-07 08:29:23Z

1

You can set validateRequest to true, which is default

<configuration>
  <system.web>
    <pages validateRequest="true" />
  </system.web>
</configuration>

And always encode user input:

Server.HtmlEncode("<script>unsafe</script>");

For more information:

Request Validation - Preventing Script Attacks

HtmlEncode, HtmlDecode

answered Oct 7, 2013 at 8:29

Vano Maisuradze

5,9196 gold badges48 silver badges73 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Dogukan Demir Over a year ago

I don't mean just malicious codes. I want to validate my page structure from top to bottom. I don't want anything injected. If you have any experience about malicious programs, you can understand me well. They can inject what they want. But I want to validate my page to inform users.

Collectives™ on Stack Overflow

Validate ASP.NET Page

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related