How Do I Understand and Defend Against Script Injection Attacks in ASP.NEThttp://asp.netSat, 29 Oct 2011 13:34:27 GMTumbracoComments for How Do I Understand and Defend Against Script Injection Attacks in ASP.NETenComment Posted by dil4uhttp://asp.net/web-forms/videos/how-do-i/how-do-i-understand-and-defend-against-script-injection-attacks-in-aspnetWed, 14 Oct 2009 09:04:54 GMT00000000-0000-0000-000000006363brilliant video....

]]>Comment Posted by invervegashttp://asp.net/web-forms/videos/how-do-i/how-do-i-understand-and-defend-against-script-injection-attacks-in-aspnetWed, 14 Oct 2009 09:07:36 GMT00000000-0000-0000-000000006364Awesome video, I hope we see more on this topic.

]]>Comment Posted by charles.f.phillipshttp://asp.net/web-forms/videos/how-do-i/how-do-i-understand-and-defend-against-script-injection-attacks-in-aspnetWed, 14 Oct 2009 19:55:21 GMT00000000-0000-0000-000000006366Excellent! I've been "JavaScripting" for over a decade, but I had no idea you could be so malicious - I just learned how innocent and ignorant I really am...

]]>Comment Posted by haithemarahttp://asp.net/web-forms/videos/how-do-i/how-do-i-understand-and-defend-against-script-injection-attacks-in-aspnetThu, 15 Oct 2009 00:42:08 GMT00000000-0000-0000-000000006367Nice Video.

]]>Comment Posted by novakghttp://asp.net/web-forms/videos/how-do-i/how-do-i-understand-and-defend-against-script-injection-attacks-in-aspnetTue, 20 Oct 2009 20:56:06 GMT00000000-0000-0000-000000006368Thanks, Joe. Now I have a *bunch* more work to do. {sigh}

]]>Comment Posted by neo302http://asp.net/web-forms/videos/how-do-i/how-do-i-understand-and-defend-against-script-injection-attacks-in-aspnetMon, 02 Nov 2009 20:32:54 GMT00000000-0000-0000-000000006369Excellent job on the video.

]]>Comment Posted by Vishalhttp://asp.net/web-forms/videos/how-do-i/how-do-i-understand-and-defend-against-script-injection-attacks-in-aspnetFri, 13 Nov 2009 09:01:50 GMT00000000-0000-0000-000000006370Brilliant video Joe, thanks a lot!

]]>Comment Posted by akatyalhttp://asp.net/web-forms/videos/how-do-i/how-do-i-understand-and-defend-against-script-injection-attacks-in-aspnetFri, 12 Feb 2010 07:17:15 GMT00000000-0000-0000-000000006371Good job man. Thank you for enlightening simpletons like me. Makes me wonder how many innocent people out there fall prey to such attacks. But thanks to you and people like you that use the knowledge they have for the good of others. This is a great form of charity. My hat's off to you!

P.S. People that saw this video - just like Joe mentioned, in conjunction with this implement other safeguards as well available in asp.net + AJAX to control and validate the user input througout your site.

]]>Comment Posted by mojara2009http://asp.net/web-forms/videos/how-do-i/how-do-i-understand-and-defend-against-script-injection-attacks-in-aspnetThu, 01 Jul 2010 20:26:53 GMT00000000-0000-0000-000000009292Wow this is really informative so far.

]]>Comment Posted by chulloshttp://asp.net/web-forms/videos/how-do-i/how-do-i-understand-and-defend-against-script-injection-attacks-in-aspnetSat, 31 Jul 2010 19:21:17 GMT00000000-0000-0000-000000009708Dear Joe!

Hi, thank you for this great video, will be great you can add another videos giving us more real techniques to apply and tell us how to create the customized paged for the unhundled exception. Thank you.

]]>Comment Posted by lilmammalhttp://asp.net/web-forms/videos/how-do-i/how-do-i-understand-and-defend-against-script-injection-attacks-in-aspnetWed, 15 Dec 2010 14:22:12 GMT00000000-0000-0000-0000000011205Great video. I do have a question though. In the XSS demo using the overlay - how is this a threat to other users? Wouldn't this malicious credit card phish control only display in the attacker's browser?

]]>Comment Posted by scalhttp://asp.net/web-forms/videos/how-do-i/how-do-i-understand-and-defend-against-script-injection-attacks-in-aspnetThu, 07 Jul 2011 11:04:30 GMT00000000-0000-0000-0000000013719Great video and 'quick' (yes, there is much much more to teach/learn in the subject) presentation.

@lilmammal: the script that does the overlay + send ajax to store the CC info is stored into a DB and executed at rendering of the page, so it renders for all people visiting that page.

It would only stop executing if the shout-box was to display only the latest X shouts, and there were at least X new shouts after the malicious one.

]]>Comment Posted by olo21http://asp.net/web-forms/videos/how-do-i/how-do-i-understand-and-defend-against-script-injection-attacks-in-aspnetSat, 29 Oct 2011 13:34:27 GMT00000000-0000-0000-0000000014518<b>Great video</b>

]]>