????? ?????? InterDev Visual ???? ??? ????? ??? ????? CSSI

?????? ????????? ?????? ?????????
???? ???????: 253120 - ??? ???????? ???? ????? ????? ??? ???????.
??? ????? ??? ???????. ????? "??? ??" ??? ??? ??????? ??? ????.
????? ???? | ?? ????

??????

?????? ??????? ??????? ????? ????? ???????? ?????? InterDev Visual ????? ???? CSSI (??????? ??????? ?????? ???????). ???? ??????? ?????? ???? ?????? ?? ??? ?? ?????? ??? ???? ???? ??????? ???? ??? ?? ??????? ????? ??.

???? ??? ??????? ??? Visual InterDev ????? ????? ????? (DTC) ? "????? ???????". ?????? ??? ??????? ???? ??? ????????? ???????? ?? ASP ?????? ?????? ????? ????? ???????? ???????:
253119????? ?????? ??? ASP ?????? ??? ??????? ?? CSSI

??????? ????

???? DTCs InterDev Visual ???????? ???? ???????? ???? ??? ????? ??? ????????? ???????? ????????. ?? ???? ?? ???? ????? ????? ?? ??????? ???????? ???????? ????? ???? ??? ????? ?? ??????? ??????? ?? ????? ???? ????? ???. ???? ??? ?????? ???? ?????? ?????? ???? DTCs ???????? ?? ????? ???? ???????? ???????? ?????? ??? ??????? ???????.

????? ???????? ??? ????? ?????:
  1. DTCs ??????? ???? ?????? ?? ????? ?????? ?????? ???????? ????? ??? ????? ?? ??????????.
  2. DTCs ??????? ???? ?? ??????? ???????? ???? ?? ??????? ?? ??????.
?? ???? ????????? ?????? ?? ??? ???????? ? ????? ????? ??????? ??? ???? ????? ??? DTC ??????? ?? ???? CSSI.

??? ??????? ?? ????? ?? DTC ???????? ??????? ?? ??? DTC (??? .getCaption ?? .getText .Value) ?? ??? ?? ????? ?????? ???????? ??????? ?????? ???????? ?????? ?? ????? ??????? HTMLEncoded. ??? ??? ??? DTCs ???? ?? ???? ?????? ??? ??? ????? ?????? ????? ??????? ?? ????? ???????? ???? ?????. ???, ????? HTMLEncode ??? ????? ??? ??? ??????. ??? ???? ??????:
Response.Write Server.HTMLEncode(Textbox1.value)
				
??? ???? ???????? ?????? ????????? ???? ?? ???? ???? ? ??? ???? ??????? URLEncode ????? ?? ???. ??? ???? ??????:
Response.Write "<A HREF=http://webserver/webapplication/page.asp?data=" & Server.URLEncode(Textbox1.value) & ">Click here!</A>"
				
????? ??? ??? ?????? ?????? ???????? ???????? ??????? ?????? entrusted ??? ???? ????? ????? ?????? ???? ???????? ?????? ???? ????. ????? ?????? ???? ?? ???? ????? ????? <meta>?????? ??? ???????? <head>??????? ????? ??. ??? ???? ??????:
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset= ISO-LATIN-1">
				
???? ????? ????? ??? ?? ASP ???????? ??????? Response.Charset:

<% Response.Charset= "ISO-LATIN-1" %>
				


???? ??? ??? ??????? ???????:

?? ??? ??????????? ??? ??????
?????? ?????
???? ?? DTC
Response.Write Button1.Value()
??????? ????????? DTC CheckBox
Response.Write CheckBox1.getCaption()
??????? ????????? ??????? DTC
Response.Write Label1.getCaption()
?? DTC ListBox
Response.Write Listbox1.getText()
???? ?? DTC OptionGroup
Response.Write OptionGroup1.getValue()
???? DTC ???? ??
Response.Write Textbox1.Value()


???? ??? ???? ?????? ??? ???????:

?? ??? ??????????? ??? ??????
?????? ?????
???? ?? DTC
Response.Write Server.HTMLEncode(Button1.Value())
??????? ????????? DTC CheckBox
Response.Write Server.HTMLEncode(CheckBox1.getCaption())
??????? ????????? ??????? DTC
Response.Write Server.HTMLEncode(Label1.getCaption())
?? DTC ListBox
Response.Write Server.HTMLEncode(Listbox1.getText())
???? ?? DTC OptionGroup
Response.Write Server.HTMLEncode(OptionGroup1.getValue())
???? DTC ???? ??
Response.Write Server.HTMLEncode(Textbox1.Value())


???? DTC ?????? ???? HTMLEncode ????? ????????? ?? ????? ??????. ??? ?????? ????? ???????? ????? ???????? (??? ???? ??????? guestbook) ? ????? ???? HTMLEncode ???????. ???? ?????? ???? ?????? ????? ??????? ?????? ?? ???? ?????? ????? ???? ??????:
=Server.HTMLEncode([fieldname])
				
??? ??? ?? ??? ?? ??? ???? ??? ????? ???? ??????. DTCs ???? ???????? HTMLEncode ??????? ???????? ?? ????? ?????? ??? ???; ??? ??. ??? ????? ????? ?????? ??? ??????? ?? ??????? ?????? ?????? ????? ?? ??????? ??? ???? ???? ???? HTMLEncoded.

??????: ????? DTCs ????? ???????? ???? ??????? ?????? ??? ?????? ????? trips ?????? ??? ??????. ?? ???? ???? DTC ???? ?? ??? ???? ??????? ????? ???? ????????? ???????? ????? ?????? ???? ????? ???????? ????? Textbox.asp ???? ???? HTMLEncodes ??????? ???? ???? ?? ????? ???????? ??? ???? ???? ??????.

?????

????? ?? ?????????? ???? ??????? ??????? ?? ????????? ??????? ??????? ?????? (CERT) ?? ????? Mellon ????:
http://www.cert.org/advisories/CA-2000-02.html
?????? ?????? ??????? ?????? "????? ???????" ?????? ??? ???? ?? ?????????:
252985????? ??? ????? ?????? ??????? ???? ??? ?? ??????? ???
253119????? ?????? ??? ASP ????? ??????? CSSI
253121????? ?????? ??? MTS/ASP ????? ??????? CSSI
253117??? Internet Explorer ?Outlook Express ????? ?????? ??????? ???? ????????

???????

???? ???????: 253120 - ????? ??? ??????: 14/???? ??????/1435 - ??????: 1.4
????? ???
  • Microsoft Visual InterDev 6.0 Standard Edition
????? ??????: 
kbnosurvey kbarchive kbmt kbcssi kbctrl kbhowto kbsecurity kbsecvulnerability KB253120 KbMtar
????? ????
???: ??? ????? ??? ?????? ???????? ?????? ????? ???? ????? ?????????? ????? ?? ????????? ?????? ????. ???? ???? ?????????? ???? ?? ???????? ???????? ?????? ????????? ????? ????????? ???????? ????? ???????? ?????? ?? ?????? ??? ?? ???????? ???????? ?? ????? ??????? ?????? ??? ??????? ?????? ??. ?????? ?? ???? ??? ??????? ???????? ????? ?? ???? ????? ?????? ??? ????? ??? ????? ??????? ?? ????? ?? ?????? ??? ??? ??????? ??????? ?? ????? ????? ????? ????? ?????. ?? ????? ???? ?????????? ??????? ??? ????? ?? ??????? ?? ????? ?????? ?? ??? ????? ?? ????? ??????? ?? ???????? ?? ??? ???????. ???? ???? ?????????? ???????? ??? ????? ?????? ??????? ??????
???? ??? ????? ??????? ?????? ??????????253120

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com