Hi All,
I have following querystring:
SELID=52d422f2-d2cb-4029-870b-50968cdb2e4a
How can I prevent a client add this to my url:
SELID=52d422f2-d2cb-4029-870b-50968cdb2e4a'%20waitfor%20delay'0%3a0%3a20'--
This really delays execution of my page.
I have already tried this:
if (Request.QueryString["SELID"] != null)
{
if (!string.IsNullOrEmpty(Request.QueryString["SELID"]))
{
SELIDPAR = Sanitizer.GetSafeHtmlFragment(Encoder.HtmlEncode(Request.QueryString["SELID"].ToString()));
}
}
Go to the complete details ...