CODEWITHSUNDEEP
asp.netvb.netxss
steve
steve

Reputation: 1

Cross-site scripting validation for VB.NET

Why I am getting cross-site scripting? 

document.getElementById('<%= (HttpUtility.HtmlEncode(txt.sampleID)) %>').disabled = true

Upvotes: 0

Views: 368

Answers (1)

Javier Ergui Blašković
Javier Ergui Blašković

Reputation: 244

I'm not sure why is it still showing as XSS vulnerability but you could also sanitize ClientID, like for example if its a number just cast it to an integer.

Upvotes: 1

Related Questions