Security Briefs: SDL Embraces The Web

The SDL also permits a small set of attributes for these elements, but before we get into this, it's more important to discuss validation techniques. One of the most effective techniques for validating user input is to use a regular expression, either through the Regular­ExpressionValidator control or the Regex class: // ensure the user input matches the form of a US ZIP code if (!Regex.IsMatch(Te

[ockeghem]

期待して読んだが今ひとつ。後で詳しく検証する

[hasegawayosuke]

「XSS 脆弱性の危険性はバッファ オーバーフローに匹敵します」そういうのなら、IEをもっとなんとかしてください。

[mi1kman]

『Ajax Security』の著者による記事