---
id: 1937
title: "Identifying and Remediating CWE-79: Cross-Site Scripting in ASP.NET"
source_domain: hackerone.com
source_url: "https://www.hackerone.com/blog/identifying-and-remediating-cwe-79-cross-site-scripting-aspnet"
published_at: "2024-01-31T01:26:08Z"
tags: ["web-security", "xss", "owasp", "input-validation", "asp-net", "cwe-79", "output-encoding"]
phying_url: "https://phying.com/item/1937"
lang: en
---

# Identifying and Remediating CWE-79: Cross-Site Scripting in ASP.NET

## Summary

How to find and fix CWE-79 XSS in ASP.NET: enforce server-side input validation and output encoding with HttpUtility.HtmlEncode, enable ValidateRequest, and test with OWASP ZAP or Burp Suite.

## Intelligence Metadata

- **Sources:** hackerone.com
- **Published:** 2024-01-31T01:26:08Z
- **Original:** https://www.hackerone.com/blog/identifying-and-remediating-cwe-79-cross-site-scripting-aspnet
- **Phying News:** https://phying.com/item/1937