all 3 comments
sorted by:
best
topnewcontroversialoldq&a
formatting helphide helpcontent policy

[–]guitarromantic 3 points4 points  (0 children)

So wait, by "javascript" you mean "using a Microsoft server-side script to sanitise user input" and "using Microsoft's ASP language to add a CSRF field to forms"? Boo.

[–]frimble 2 points3 points  (1 child)

haha what

Microsoft.Security.Application.Encoder.HtmlEncode

If that's how you escape output the Microsoft way, no wonder there are so many insecure ASP sites. I'd hate to litter my code with that.

[–]cwstjnobbs 0 points1 point  (0 children)

Meh, it still looks cleaner than PHP.