0

I know we can make ASP.NET MVC project to use AntiXssEncoder as a default encoder but sometimes we need to explicitly encode/decode html/url/js inside the code.

Despite the fact that nearly all methods inside AntiXSS class have been marked as deprecated, so what are we supposed to do in these situations? Is there any alternative or we should go ahead and use them?

Mori
  • 2,484
  • 5
  • 28
  • 45

1 Answers1

0

It seems pretty much all encoder methods have a new implementation in Microsoft.Security.Application.Encoder class.

Mori
  • 2,484
  • 5
  • 28
  • 45