.NET custom Textbox control

et al,

For the .NET crowd, here's a nice little custom reusable
Textbox control that will provide automatic HTML encoding
to help mitigate the risk of XSS on user-supplied input
fields:

http://www.ddj.com/documents/s=9209/ddj20040709asp/

Obviously there are other, better ways to do this like
strongly Typing your data and then calling the .NET
regex validators to enforce type...

But this is still a quick and easy way to get to get
that LCD of webapp vulnerabilities: XSS on unsanitized
user-supplied input fields.

Cheers,

Arian
Received on Jul 16 2004