The Microsoft Anti-Cross Site Scripting Library V4.2 (AntiXSS V4.2) is an encoding library designed to help developers protect their ASP.NET web-based applications from XSS attacks. It differs from most encoding libraries in that it uses the white-listing technique -- sometimes referred to as the principle of inclusions -- to provide protection against XSS attacks. This approach works by first defining a valid or allowable set of characters, and encodes anything outside this set (invalid characters or potential attacks). The white-listing approach provides several advantages over other encoding schemes.
This release addresses a vulnerability in the HTML Sanitizer, MS12-007 and adds full support for .NET 4.0 as well as restoring support for .NET 2.0.

DOWNLOAD HERE

Wish you all a very happy new year.

PerfView is a performance analysis tool focusing on ETW information (ETL files) as well as CLR memory information (heap dumps). It can collect and view ETL files as well as XPERF CSV files. Powerful grouping operators allow you to understand performance profiles in ways other tools can't.

PerfView is used internally at Microsoft by a number of teams and is the primary performance investigation tool on the .NET Runtime team. Features include:

• Non-invasive collection - suitable for use in live, production environments
• Xcopy deployment - copy and run
• Memory
  • Support for very large heaps (gigabytes)
  • Snapshot diffing
  • Dump files (.dmp)
• CPU Performance
  • Support for managed, native, and mixed code
  • Can read XPerf logs
  • Profile diffing

DOWNLOAD HERE