<?xml version="1.0" encoding="UTF-8" ?>
<?xml-stylesheet type="text/xsl" href="http://blogs.msdn.com/utility/FeedStylesheets/rss.xsl" media="screen"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:wfw="http://wellformedweb.org/CommentAPI/"><channel><title>SDL and the XSS Filter</title><link>http://blogs.msdn.com/sdl/archive/2008/08/27/sdl-and-the-xss-filter.aspx</link><description>Steve Lipner here. When the Internet Explorer team posted the announcement about the XSS Filter feature in IE8 I asked some other members of the SDL blog team “why aren’t we talking about the new XSS Filter feature on the SDL blog?” Bryan and Jeremy said</description><dc:language>en-US</dc:language><generator>CommunityServer 2.1 SP1 (Build: 61025.2)</generator><item><title>SDL and the XSS Filter </title><link>http://blogs.msdn.com/sdl/archive/2008/08/27/sdl-and-the-xss-filter.aspx#8900906</link><pubDate>Wed, 27 Aug 2008 20:40:07 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:8900906</guid><dc:creator>Michael Howard's Web Log</dc:creator><description>&lt;p&gt;Close on the heels of David Ross' XSS defense in IE8 beta 2, my boss, Steve Lipner just posted an article&lt;/p&gt;
</description></item><item><title>SDL and the XSS Filter, Revisited</title><link>http://blogs.msdn.com/sdl/archive/2008/08/27/sdl-and-the-xss-filter.aspx#8934731</link><pubDate>Mon, 08 Sep 2008 23:28:38 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:8934731</guid><dc:creator>The Security Development Lifecycle</dc:creator><description>&lt;p&gt;Bryan here. Since Steve called me out in his post on the XSS Filter last week, I feel obligated to clarify&lt;/p&gt;
</description></item><item><title>SDL as meta-security?</title><link>http://blogs.msdn.com/sdl/archive/2008/08/27/sdl-and-the-xss-filter.aspx#8935027</link><pubDate>Tue, 09 Sep 2008 01:15:03 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:8935027</guid><dc:creator>SNACKFIN.COM</dc:creator><description>&lt;p&gt;It's interesting that the Microsoft Secure Development Lifecycle is approaching XSS attacks in the same way desktop vulnerabilities are tackled. In a sense, the SDL is metasecurity -- while still addressing direct security issues (individual attacks/vulnerability),&lt;/p&gt;
</description></item><item><title>MSDN FLASH IRELAND - INTERNATIONAL RESOURCES - 15 September 2008 </title><link>http://blogs.msdn.com/sdl/archive/2008/08/27/sdl-and-the-xss-filter.aspx#8954026</link><pubDate>Tue, 16 Sep 2008 18:23:18 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:8954026</guid><dc:creator>Microsoft Ireland Blog</dc:creator><description>&lt;p&gt;a {color : #0033CC;} a:link {color: #0033CC;} a:visited.local {color: #0033CC;} a:visited {color : #800080;}&lt;/p&gt;
</description></item></channel></rss>