ASP.NET MVC: trying out a script injection hangs Visual Studio 2010 completely?

Posted by Mark Redman on Stack Overflow See other posts from Stack Overflow or by Mark Redman
Published on 2010-04-04T21:52:53Z Indexed on 2010/04/05 7:33 UTC
Read the original article Hit count: 202

Wondering if anyone has an idea of whats going on:

I am new to ASP.NET MVC and am trying out a few things with jquery/ajax.

The basic scenario is a dropdownlist with an add button next to it. Clicking the add button launches a jquery ui dialog with a textbox form, entering a value saves the item to the database and refreshes the drop-downlist. The dropdownlist is re-populated using a JSON result. This all works ok.

I thought I would try a script injetion attack, ie add the text: alert("oh dear") to seee what would happen and to check if I need to encode anything. When I try and save this item (similar to the same process of adding a plain text entry) Visual Studio 2010 Beta 2 hangs completely.

Any ideas?

UPDATE:

It happens when posting: "</"

© Stack Overflow or respective owner

Related posts about asp.net-mvc

Related posts about jQuery