??????????械?Textbox?????????????????????????????些???????? ??????????????????????????????XSS???
??????URL?胁?????些???????URL???????Web???????? ????些?????????????????????????  ??????????????????
??????????:  ?????????XSS???
????????????泻??XSS??韫�????? ???XSS?????????????????????HttpWebRequest?? ?????xss ?????????????Web???????? ????HttpWebResponse?校??????XSS????????????????????
????HTML Encode ??URL Encode??????
???????????????????????????????? ?????????????????????
????HTML??????????????????????URL ????????????url??娣�???????????url?娣�?????????????????????????url?械??
??????????baidu??????"???????"?? URL????
????http://www.baidu.com/s?wd=%B2%E2%CA%D4%BA%BA%D7%D6&rsv_bp=0&rsv_spt=3&inputT=7477
??????谓URL??????????????蟹??????????????????婊�??????%???????位????????????????????????+??
??????C#????????????????????????HttpUtility.UrlEncode("string <scritp>") ???????  ?????????System.Web??????
????Fiddler???????????????? ???Toolbar???"TextWizard" ???
??????????械?XSS??????
?????????????XSS?? ?????????????????????屑??????????????XSS?? ????IE8??IE9??Firefox?? Chrome. ???????XSS????????? ??????????XSS?? ???????

????????????????? ?????IE7??
????ASP.NET?械?XSS???????
????ASP.NET???蟹???XSS????????????????????????????XSS??????????????XSS????????ASP.NET?????????????????

?????????????????懈??? ???????????XSS?????? ASP.NET???????????????????? ?????????????邪??????????????写?????”?????????“??
?????????????????????? ??????? <%@  Page  validateRequest=“false"  %>