Loading

how to encode the CSS text on web application pages

srinivas rao

7y1.1k.NET

Hi team

working on css attacks validation code c# and they injecting the script in this way

%uff1cscript%uff1ealert%uff08123456%uff09%uff1c/script%uff1e and from the server side how to encode this text

to find out the it contans html code or not i am using following way to encode but its not working

System.Web.HttpUtility.HtmlDecode or HttpContext.Current.Server.HtmlEncode

let us know how to validate it

Thanks in advance

2 Replies

Know the answer? Post it — somebody with the same question will find it here.

srinivas rao7y ago
Hi Dinesh,

Thanks for the reply but its not working please let me know any other approaches.

Thanks
0
Dinesh Gabhane7y ago
Try to use AntiXssEncoder.CssEncode(String) Method. please refer below url.

https://docs.microsoft.com/en-us/dotnet/api/system.web.security.antixss.antixssencoder.cssencode?view=netframework-4.8
0