How do you avoid XSS vulnerabilities in ASP.Net (MVC)?

Question

I recently noticed that I had a big hole in my application because I had done something like:

\" />
         


        

Answer 1

Potentially Dangerous HTML Tags:

While not an exhaustive list, the following commonly used HTML tags could allow a malicious user to inject script code:

                                 
              
            
                          
    

        
         

                验证码
                

                  
                
                

                   看不清?
                
              
                                  

                    
   
                 
             
              
提交回复
            
          
        
      
       
      
    
    

          
 
     
 

        
热议问题