Skip to content

Commit

Permalink
Update README.md
Browse files Browse the repository at this point in the history
  • Loading branch information
kochetkov committed Dec 5, 2017
1 parent 1e2eecc commit ae64cc1
Showing 1 changed file with 10 additions and 2 deletions.
12 changes: 10 additions & 2 deletions README.md
@@ -1,6 +1,10 @@
# libprotection-dotnet
# LibProtection.NET

**libprotection-dotnet** is a .NET version of LibProtection library — an alternative implementation of the standard functionality of the formatted and interpolated strings. It provides a realtime automatic protection from any class of the injection attacks, which belong to the most attacked languages (HTML, URL, JavaScript, SQL and the file paths are currently supported).
## Disclaimer

This project is in the state of early beta. It is stable enough for the public testing, but can be used at the production environments only at your own risk.

**Libprotection.NET** is a .NET version of LibProtection library — an alternative implementation of the standard functionality of the formatted and interpolated strings. It provides a realtime automatic protection from any class of the injection attacks, which belong to the most attacked languages (HTML, URL, JavaScript, SQL and the file paths are currently supported).

| Windows Build Status |
|---|
Expand Down Expand Up @@ -41,3 +45,7 @@ Response.Write(SafeString.Format<Html>($"<a href='{a}' onclick='alert("{b}");ret
In this case, after interpolation, the resulting string will look like this:

``<a href='%27onmouseover%3d%27alert(%60XSS%60)' onclick='alert("\&quot;);alert(`XSS`)");return false'>&lt;script&gt;alert(`XSS`)&lt;/script&gt;</a>``

## Try it online

A test site that imitates a vulnerable application protected by the library is available [here](http://playground.libprotection.org/).

0 comments on commit ae64cc1

Please sign in to comment.