ASP.NET MVC: trying out a script injection hangs Visual Studio 2010 completely?
- by Mark Redman
Wondering if anyone has an idea of whats going on:
I am new to ASP.NET MVC and am trying out a few things with jquery/ajax.
The basic scenario is a dropdownlist with an add button next to it. Clicking the add button launches a jquery ui dialog with a textbox form, entering a value saves the item to the database and refreshes the drop-downlist. The dropdownlist is re-populated using a JSON result. This all works ok.
I thought I would try a script injetion attack, ie add the text: alert("oh dear") to seee what would happen and to check if I need to encode anything. When I try and save this item (similar to the same process of adding a plain text entry) Visual Studio 2010 Beta 2 hangs completely.
Any ideas?
UPDATE:
It happens when posting: "</"