Hi,
I am using DataGrid to display the data from the database. I have used the event ItemDataBound to encode the data coming from the database before being displayed in the grid. Is there any other efficient/recommended method to avoid XSS issue while using DataGrid for displaying data from the database?
Thanks,
Umesh D K
ASP.NET 2.0 GridView HtmlEncode property of Bound Columns is set to true for security reasons (to prevent xss attacks). I think you are working with 1.1 version.
Take a look at this MSDN article - Take Advantage of ASP.NET Built-in Features to Fend Off Web Attacks
We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.