Search code examples
wcfrestwcf-securitywcf-rest

Does the RESTful Service exposed need to check for XSS Attacks

I have a RESTful WCF service that exposes a method that takes in an XElement as a parameter.

Now i want to know if i need to check the incoming message for XSS attacks first or does the framework handle it by default.

If i need to handle do i use the Microsoft XSS library to perform this operation on the XElement string that comes in from the request.

Solution

  • check the below link for further details

    REST Security

    REST does not have predefined security methods so developers define their own, and Often, developers in a hurry to just get... services deployed don't treat them with the same level of diligence as they treat web applications.