All rules →
Rules / C#
SHIELD-CSHARP-018

Reflected XSS via Response.Write or Html.Raw

highC#CWE-79CVSS 7.4

What it detects

Untrusted request input is written to the response without encoding, or rendered with Html.Raw.

How to fix

HTML-encode untrusted output and avoid Html.Raw for user-controlled content.

Scan your repo freeFull documentation
Back to all rules
SHIELD-CSHARP-018: Reflected XSS via Response.Write or Html.Raw — Zennoxa Shield