Announcing CAT.NET CTP and AntiXSS v3 beta

re: Announcing CAT.NET CTP and AntiXSS v3 beta

kolchak — Wed, 17 Dec 2008 06:36:24 GMT

Is CAT.NET x64 only??? I know we are heading that way, but we're not all on 64 bit yet :(

Microsoft internal SDL tools released to public beta

SNACKFIN.COM — Thu, 18 Dec 2008 05:06:44 GMT

Today, Microsoft released new tools that supplant a couple of tools I mentioned last week. The first is an update to the Anti-XSS library that is now current with the version we use internally. The second, a static code...

MSDN FLASH IRELAND - INTERNATIONAL RESOURCES - 15 JANUARY 2009

Microsoft Ireland Blog — Thu, 15 Jan 2009 16:21:08 GMT

a {color : #0033CC;} a:link {color: #0033CC;} a:visited.local {color: #0033CC;} a:visited {color : #800080;}

re: Announcing CAT.NET CTP and AntiXSS v3 beta

axleyjc — Thu, 22 Jan 2009 20:48:34 GMT

With any significant number of assemblies being analyzed in a single run, both the IDE integration plugin and the command-line tool eventually chew up all memory on the system and then crash Visual Studio or the command line tool. It has been this way since its inception. It wasn't until I used the command-line version recently that I saw the OutOfMemoryException (on a computer with 2 gigs even) and then the crash.

Is there a known safe limit on the number or size of assemblies to limit each run to so as to avoid running out of memory? Is this a known bug that is being fixed so it doesn't have this problem? FxCop doesn't seem to be as resource intensive.

re: Announcing CAT.NET CTP and AntiXSS v3 beta

Philip.Agcaoili — Sat, 31 Jan 2009 21:02:11 GMT

Todd,

Great stuff! We've standardized on the AntiXSS library from some time now.

What is the difference between the new CAT.NET tool and FxCop?

Regards,

Phil Agcaoili

Welcome...

Information Security — Tue, 03 Mar 2009 22:32:03 GMT

Welcome… My name is Todd Kutzke and I help lead the Information Security group within Microsoft. Organizationally,