ChuckLu - 博客园

2021年9月3日

What is the difference between html.AttributeEncode vs html.Encode?

摘要： What is the difference between html.AttributeEncode vs html.Encode? AttributeEncode converts only a handful of characters: " & < \ Encode does a full 阅读全文

posted @ 2021-09-03 13:41 ChuckLu 阅读(81) 评论(0) 推荐(0)

How does Html.Raw MVC helper work?

摘要： What does HTML.Raw do? Is HTML.raw() specific to MVC? On what scenarios we have to use it? Can you please explain with an example. 回答1 Text output wil 阅读全文

posted @ 2021-09-03 13:35 ChuckLu 阅读(67) 评论(0) 推荐(0)

Html.Raw and Xss

摘要： Prevent XSS attacks and still use Html.Raw It isn't easy and you probably don't want to do this. May I suggest you use a simpler language than HTML fo 阅读全文

posted @ 2021-09-03 11:24 ChuckLu 阅读(95) 评论(0) 推荐(0)

HTML Purifier XSS Attacks Smoketest (Xss cheat sheet)

摘要： HTML Purifier XSS Attacks Smoketest XSS attacks are from http://ha.ckers.org/xss.html. Caveats: Google.com has been programatically disallowed, but as 阅读全文

posted @ 2021-09-03 11:19 ChuckLu 阅读(114) 评论(0) 推荐(0)

Create and Render Partial Views

摘要： Create and Render Partial Views 阅读全文

posted @ 2021-09-03 10:46 ChuckLu 阅读(51) 评论(0) 推荐(0)

2021年9月2日

When to encode space to plus (+) or %20?

摘要： When to encode space to plus (+) or %20? 回答1 + means a space only in application/x-www-form-urlencoded content, such as the query part of a URL: http: 阅读全文

posted @ 2021-09-02 19:01 ChuckLu 阅读(134) 评论(0) 推荐(0)

Does C# have an equivalent to JavaScript's encodeURIComponent()?

摘要： Does C# have an equivalent to JavaScript's encodeURIComponent()? Uri.EscapeDataString or HttpUtility.UrlEncode is the correct way to escape a string m 阅读全文

posted @ 2021-09-02 18:39 ChuckLu 阅读(71) 评论(0) 推荐(0)

When are you supposed to use escape instead of encodeURI / encodeURIComponent?

摘要： When are you supposed to use escape instead of encodeURI / encodeURIComponent? 回答1 escape() Don't use it! escape() is defined in section B.2.1.2 escap 阅读全文

posted @ 2021-09-02 17:06 ChuckLu 阅读(43) 评论(0) 推荐(0)

Difference between escape(), encodeURI(), encodeURIComponent()

摘要： Difference between escape(), encodeURI(), encodeURIComponent() 回答1 For the visually minded, here's a table showing the effects of encodeURI(), encodeU 阅读全文

posted @ 2021-09-02 16:52 ChuckLu 阅读(31) 评论(0) 推荐(0)

How can I trace the HttpClient request using fiddler or any other tool?

摘要： How can I trace the HttpClient request using fiddler or any other tool? Generally speaking, simply starting Fiddler before your application is suffici 阅读全文

posted @ 2021-09-02 16:09 ChuckLu 阅读(104) 评论(0) 推荐(0)

Chuck Lu

公告