ASP.NET MVC: trying out a script injection hangs Visual Studio 2010 completely?
Posted
by Mark Redman
on Stack Overflow
See other posts from Stack Overflow
or by Mark Redman
Published on 2010-04-04T21:52:53Z
Indexed on
2010/04/05
7:33 UTC
Read the original article
Hit count: 226
Wondering if anyone has an idea of whats going on:
I am new to ASP.NET MVC and am trying out a few things with jquery/ajax.
The basic scenario is a dropdownlist with an add button next to it. Clicking the add button launches a jquery ui dialog with a textbox form, entering a value saves the item to the database and refreshes the drop-downlist. The dropdownlist is re-populated using a JSON result. This all works ok.
I thought I would try a script injetion attack, ie add the text: alert("oh dear") to seee what would happen and to check if I need to encode anything. When I try and save this item (similar to the same process of adding a plain text entry) Visual Studio 2010 Beta 2 hangs completely.
Any ideas?
UPDATE:
It happens when posting: "</"
© Stack Overflow or respective owner