Anti-XSS 3.0 - Beta

[Ocean10000]

One of the more common problems in web applications are Cross Site Scripting attacks. These are where a foreign JavaScript is inject into a website without the web site owners permission, and are often used to trick the website users since they trust the site. Microsoft has released an updated version of their Anti-XSS library free to the public.

Anti-XSS is using the MS-PL license. The source code can be found at CodePlex [codeplex.com]. And the binary can be found in the free MSDN [microsoft.com] downloads.

An older tutorial can be found in the MSDN library which describes in a bit more detail where common places where Cross Site Scripting attack vectors can be found, and how to fix these areas using the Anti-XSS library.
Microsoft Anti-Cross Site Scripting Library V1.5: Protecting the Contoso Bookmark Page [msdn.microsoft.com]

[vincevincevince]

Very interesting to take a software approach; but my main concern is that the solution is not portable. Given that the problem is a Javascript security issue, the solution likewise should ideally be a Javascript library and hence applicable to all platforms and servers able to support or serve javascript.