NeatHtml description
NeatHtml is a tool that helps prevent cross-site scripting attacks, a.k.a. XSS attacks
NeatHtml is a tool that helps prevent cross-site scripting attacks, a.k.a. XSS attacks, by validating untrusted HTML against an XML schema that does include elements, attributes, and values that can be used for cross-site scripting attacks. Untrusted HTML typically comes from an untrusted user (e.g. in a form submission or an email).
NeatHtml consists of the NeatHtml schema definition and a .NET assembly that can be used to validate HTML fragments against the schema.
Requirements:
· Uses a white-list approach to help prevent attacks that take advantage of currently unknown security holes.
· Reduces false-positives by allowing many common HTML constructs and inline styles.
· Integrates easily with existing applications.
· Works under Mono, .NET 1.1, and .NET 2.0.
· Licensed under the Lesser General Public License (LGPL), a business-friendly open source license.
Requirements:
· .NET 1.1 or 2.0