(Partial) XSS Fix For ASP.NET

XSSTextBox.vb

' In the web.config
'
'<pages>
' <tagMapping>
'   <clear />
'   <add tagType="System.Web.UI.WebControls.TextBox"
'       mappedTagType="XSSTextBox"/>
'  </tagMapping>
'</pages>

Imports Microsoft.Security.Application.Sanitizer

Public Class XSSTextBox
    Inherits TextBox

    Public Overrides Property Text() As String
        Get
            Return GetSafeHtmlFragment(MyBase.Text)
        End Get
        Set(ByVal value As String)
            MyBase.Text = value
        End Set
    End Property

End Class