I am very New to Vb.net.
We are using fortify software for projects when it is going to LIVE. In that process I got some cross-Site Scripting : persistent Data flow issues.
Can anybody know how to resolve the following issue:
CType(srReader.GetValue(1), String)
CType(srReader.GetValue(2), String)
When I am loading the above value into some labels it is showing error; error name as mentioned above.
guys can anybody knows how to get this value in a different way.
Can you give more context around where you are using this type cast? I don’t know what fortify software is, but if it is a security analysis tool and you are receiving “Cross site scripting” errors, then the problem is most likely that you are returning this string in it’s native state to be rendered as HTML. To avoid cross-site scripting risks, you should be html-encoding this value. That is, unless it is known to be safe and intended to be rendered as HTMl, in which case you’ll just have to ignore or suppress this error.