I see that the web security library (WPL) comes with two different options:
- Security Execution Mechanism (SRE)
- AntiXSS Library
The first seems great, since no code is needed, this is an HTTPModule. The second requires that you manually add the escape logic to the code.
Despite this advantage that I mentioned, SRE is not very popular, and I wonder why. Is there a known issue with this library, or any big benefit of using AntiXSS that I don't see?
Thank!
source
share