Prevent XSS Attack in Rich Text

[infrastructure Team]

Hi

Having had recent security penetration tests conducted, it become apparent that when we saved the Rich Text control's html we open up our system to a cross site scripting attack. 

When we try to validate the html using a xss technique it always comes back as indicating that the Html is not valid.

I'm wondering if you have any experience to share as to how we best handle the Html data being posted via Ajax to our server without allowing for any xss attacks?

Thanks

[Prince Oliver]

Hello Damien, 

Greetings from Syncfusion support. 

Our controls do not have a built-in support for XSS protection, hence it is recommended that use HTML Sanitizer to check the requests. For further details regarding this, please check our UG documentation related to XSS Security. 

Link 1: https://help.syncfusion.com/js/xss-security 

Link 2: https://help.syncfusion.com/js/xss-security#xss-protection-for-mvc-platform 

Let us know if you need any further assistance on this. 

Regards, 

Prince