CASE .NET 4.3 | Defensive Coding Against Cross-Site Scripting (XSS)
CASE .NET (312-95) Β· 4.3 β Defensive Coding Against Cross-Site Scripting (XSS) How cross-site scripting works (reflected, stored, DOM-based), and defensive coding in ASP.NET: context-aware output encoding, Razor automatic encoding and Html.Raw, Web Forms encoding syntax, HtmlEncoder / JavaScriptEncoder / UrlEncoder in ASP.NET Core, sanitising rich text, request validation, HttpOnly cookies and Content Security Policy. Five practice questions included. Chapters: 00: 00 Introduction 00: 21 How XSS works 01: 57…









