XSSDetect is a static code analysis tool that helps identify Cross-Site Scripting security flaws found within Web applications. It is able to scan compiled managed assemblies (C#, Visual Basic .NET, J#) and analyze dataflow paths from sources of user-controlled input to vulnerable outputs. It also detects whether proper encoding or filtering has been applied to the data and will ignore such "sanitized" paths.
Monday, October 29, 2007
XSS detection tool for VS2005
Microsoft download has now a tool to detect XSS leaks in ASP.NET code.
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment