English 中文(简体)
Ajax XML
原标题:Ajax XML issues with XSS validation

While using Ajax in web applications we use XML to transfer the data between server and client. However XSS validation comes into picture, So questions are, 1. Is passing XML like this is correct? 2. Are we exposed to security issues if we turn off XSS validation? 3. Can passing Ajax request with header (content-type = application/xml) solve this problem ?

JSON is also good approach to transfer the data but that to invoke XSS. So what is correct and incorrect? Suggest some good practices. Please provide your input for the same. Thanks,

最佳回答

我更喜欢为此使用JSON;比XML高得多的轻重,而且由于这是一种 j印物,因此,使用在你的活动手里退还的数据变得微不足道。 谨慎行事,不要把你的个人目标作为这种妥协的担保——见。 Java的文字不是邪恶吗?

关于特别安全局的保护,正是出于良好原因。 我从您的岗位上认为,客户守则是在数据来源的不同领域主办的? 只有在情况如此的情况下,XSS的保护才会生效。 您不妨研究为这一设想而开发的JSONp,尽管它也带有自己的一套安全关切:

希望这一帮助,

JS

问题回答

暂无回答




相关问题
Anyone feel like passing it forward?

I m the only developer in my company, and am getting along well as an autodidact, but I know I m missing out on the education one gets from working with and having code reviewed by more senior devs. ...

How to Add script codes before the </body> tag ASP.NET

Heres the problem, In Masterpage, the google analytics code were pasted before the end of body tag. In ASPX page, I need to generate a script (google addItem tracker) using codebehind ClientScript ...

Transaction handling with TransactionScope

I am implementing Transaction using TransactionScope with the help this MSDN article http://msdn.microsoft.com/en-us/library/system.transactions.transactionscope.aspx I just want to confirm that is ...

System.Web.Mvc.Controller Initialize

i have the following base controller... public class BaseController : Controller { protected override void Initialize(System.Web.Routing.RequestContext requestContext) { if (...

Microsoft.Contracts namespace

For what it is necessary Microsoft.Contracts namespace in asp.net? I mean, in what cases I could write using Microsoft.Contracts;?

Separator line in ASP.NET

I d like to add a simple separator line in an aspx web form. Does anyone know how? It sounds easy enough, but still I can t manage to find how to do it.. 10x!

热门标签