Friday, 20 July 2018

How to restrick the script tag in URL cross site scripting

 Active the requestFiltering utility in IIS then put the below tag for  re-stick the script tag in URL

 <system.webServer>
<security>
      <requestFiltering>
        <denyQueryStringSequences>
          <add sequence="&gt;" />
          <add sequence="&lt;" />
        </denyQueryStringSequences>
      </requestFiltering>
    </security>
  </system.webServer>

No comments:

Post a Comment