ValidateRequest does not mitigate XSS completely

I often mentioned that to customers and students. Here is the “official” word.

 

This entry was posted in ASP.NET. Bookmark the permalink.

Leave a comment