RSS

All Project Updates

Discussions

Issue Tracker

Releases

Reviews

Source Code

Wiki & Documentation

RSS

Anti-XSS Library v3.1

Released:	Sep 15 2009
Updated:	Sep 15 2009 by anilkr
Dev status:	Stable
Rated:	based on 4 ratings (Add your own rating)
Reviewed:	3 reviews
Downloaded:	0 downloads
Wiki link:	[release:20333]

Microsoft Public License (Ms-PL)

This license governs use of the accompanying software. If you use the software, you accept this license. If you do not accept the license, do not use the software.

1. Definitions

The terms "reproduce," "reproduction," "derivative works," and "distribution" have the same meaning here as under U.S. copyright law.

A "contribution" is the original software, or any additions or changes to the software.

A "contributor" is any person that distributes its contribution under this license.

"Licensed patents" are a contributor's patent claims that read directly on its contribution.

2. Grant of Rights

(A) Copyright Grant- Subject to the terms of this license, including the license conditions and limitations in section 3, each contributor grants you a non-exclusive, worldwide, royalty-free copyright license to reproduce its contribution, prepare derivative works of its contribution, and distribute its contribution or any derivative works that you create.

(B) Patent Grant- Subject to the terms of this license, including the license conditions and limitations in section 3, each contributor grants you a non-exclusive, worldwide, royalty-free license under its licensed patents to make, have made, use, sell, offer for sale, import, and/or otherwise dispose of its contribution in the software or derivative works of the contribution in the software.

3. Conditions and Limitations

(A) No Trademark License- This license does not grant you rights to use any contributors' name, logo, or trademarks.

(B) If you bring a patent claim against any contributor over patents that you claim are infringed by the software, your patent license from such contributor to the software ends automatically.

(C) If you distribute any portion of the software, you must retain all copyright, patent, trademark, and attribution notices that are present in the software.

(D) If you distribute any portion of the software in source code form, you may do so only under this license by including a complete copy of this license with your distribution. If you distribute any portion of the software in compiled or object code form, you may only do so under a license that complies with this license.

(E) The software is licensed "as-is." You bear the risk of using it. The contributors give no express warranties, guarantees or conditions. You may have additional consumer rights under your local laws which this license cannot change. To the extent permitted under your local laws, the contributors exclude the implied warranties of merchantability, fitness for a particular purpose and non-infringement.

There are no downloads associated with this release.

We are excited to announce the RTM version of Anti-XSS Library v3.1. This binary distribution is availible on http://www.microsoft.com/downloads/details.aspx?FamilyId=051ee83c-5ccf-48ed-8463-02f56a6bfc09&displaylang=en.

What’s New in This Release

New features in this version of the Anti-Cross Site Scripting Library include:

An expanded white list that supports more languages
Performance improvements
Performance data sheets (in the online help)
Support for Shift_JIS encoding for mobile browsers
A sample application
Security Runtime Engine (SRE) HTTP module

Release Details

This binary distribution is also availible on http://www.microsoft.com/downloads/details.aspx?FamilyId=051ee83c-5ccf-48ed-8463-02f56a6bfc09&displaylang=en.

Releases

Released | Planned

Anti-XSS Library v3.1

Sep 15 2009, Stable

There are no planned releases for this project.

Release Notification

Reviews for this release

The Library method (referenced in project) is good, but don't expect 100% success with the SRE. I tested adding just the SRE as a "quick fix" option, but found that on a standard search form giving results in a GridView with a buttonfield, the link/button control would be deleted so a blank column resulted. Not a good result for that scenario.
by AlecM on Jan 27 at 2:03 PM

The Security Runtime Engine (SRE) HTTP Module will save me countless hours of adding/maintaining all of the places in code where you would normally use HtmlEncode(), UrlEncode(), JavaScriptEncode(), etc. Thank you!
by dblack on Dec 23 2008 at 4:37 PM

Working great and exactly doing what it should.
by Nordes on Dec 15 2008 at 12:59 PM

AntiXSS

Available Downloads

Release Notes

What’s New in This Release

Release Details

Releases

Rate this release

Delete Anti-XSS Library v3.1