Posted by adic on Jan 19
Introduction-------------
Microsoft Anti-XSS Library is used to protect applications from Cross-Site Scripting attacks, by providing methods for
input sanitization.
Vulnerability
-------------
Microsoft Anti-XSS Library 3.0 and 4.0 are vulnerable to an attack in which an attacker is able to create a specially
formed CSS, that after passing through the GetSafeHTML or GetSafeHtmlFragment methods, contains an expression that
triggers a...