Update [3/16/06, 4:56PM] There has been some confusion between what IOSEC does and what the Microsoft Anti-Cross Site Scripting Library does (linked to below). The Anti-XSS library currently has a subset of the functionality of IOSEC. Over the coming...

Some users who have been using IOSEC, our internal library for defending against cross-site scripting (XSS) attacks, may be wondering what’s the difference between that library and the Microsoft Anti-Cross Site Scripting Library V1.0 at http://www.microsoft...

So you’ve found some kind of security issue in an application, now what? In many organizations, the security team is either very demanding “this must be fixed” or has no enforcement capability at all “please fix this”. At Microsoft IT, we take a balanced...