Prevent Cross Site Scripting at Application Level in Mvc

Question

How to Prevent Cross Site Scripting at Application Level in Mvc

Saillesh Pawar · Answer

http://patrickdesjardins.com/blog/asp-net-mvc-with-the-validateantiforgerytoken-for-cross-site-request-forgeries

Francis · Answer

Try this urls: http://blog.stevensanderson.com/2008/09/01/prevent-cross-site-request-forgery-csrf-using-aspnet-mvcs-antiforgerytoken-helper/ http://www.devcurry.com/2013/01/what-is-antiforgerytoken-and-why-do-i.html

Abhishek Kumar · Answer

can you give some example?

Saillesh Pawar · Answer

In MVC we make use of Antiforgery token and MVC itself take care of Cross Site Scripting attacks by not allwoing html tags to be passed in parameters unless and until you allow them in controller method.