XSS攻击解决方法

跨站攻击，怎么解决呢？当然是特殊字符过滤了，常用的有两种方式：

1、自写函数过滤特殊字符：

public static string XssReplace(string source) { source = source.Replace("<", ""); source = source.Replace(">", ""); source = source.Replace("'", ""); source = source.Replace("/"", ""); return source; }

2、用HttpUtility.HtmlEncode过滤特殊字符

<script language="javascript" type="text/javascript"> var question = "<%=HttpUtility.HtmlEncode(Question)%>"; </script>