diff --git a/xml/System.Web.Security.AntiXss/AntiXssEncoder.xml b/xml/System.Web.Security.AntiXss/AntiXssEncoder.xml index 16a3fdb8b79..65e27cefa3c 100644 --- a/xml/System.Web.Security.AntiXss/AntiXssEncoder.xml +++ b/xml/System.Web.Security.AntiXss/AntiXssEncoder.xml @@ -174,20 +174,20 @@ |0x0180 - 0x024F|Characters between 0x0180 (384 decimal) and 0x024F (591 decimal). (The Unicode [Latin-Extended-B](https://www.unicode.org/charts/PDF/U0180.pdf) character range.)| |0x0250 - 0x02AF|Characters between 0x0250 (592 decimal) and 0x02AF (687 decimal). (The Unicode [IPA Extensions](https://www.unicode.org/charts/PDF/U0250.pdf) character range.)| |0x02B0 - 0x02FF|Characters between 0x02B0 (688 decimal) and 0x02FF (767 decimal). (The Unicode [Spacing Modifier Letters](https://www.unicode.org/charts/PDF/U02B0.pdf) character range.)| -|0x0300 - 0x036F|Characters between 0x0300 (768 decimal) and 0x036F (879 decimal). (The Unicode [Combining Diacritical Marks](https://www.unicode.org/charts/PDF/U0300.pdf) character range.)| - - The following table lists examples of inputs and the corresponding encoded outputs. - -|Input examples| Encoded outputs| -|-|-| -|`alert('XSS Attack!');`|`alert('XSS Attack!');`| -|``|`<script>alert('XSS Attack!');</script>`| -|`alert('XSSあAttack!');`|`alert('XSSあAttack!');`| -|`user@contoso.com`|`user@contoso.com`| -|`"Anti-Cross Site Scripting Namespace"`|`"Anti-Cross Site Scripting Namespace"`| - - To customize the safe list, call the method. - +|0x0300 - 0x036F|Characters between 0x0300 (768 decimal) and 0x036F (879 decimal). (The Unicode [Combining Diacritical Marks](https://www.unicode.org/charts/PDF/U0300.pdf) character range.)| + + The following table lists examples of inputs and the corresponding encoded outputs. + +|Input examples| Encoded outputs| +|-|-| +|`alert('XSS Attack!');`|`alert('XSS Attack!');`| +|``|`<script>alert('XSS Attack!');</script>`| +|`alert('XSSあAttack!');`|`alert('XSSあAttack!');`| +|`user@contoso.com`|`user@contoso.com`| +|`"Anti-Cross Site Scripting Namespace"`|`"Anti-Cross Site Scripting Namespace"`| + + To customize the safe list, call the method. + ]]> @@ -279,11 +279,11 @@ | Input | Output | |------------------------------------------|---------------------------------------------------------------| -| `alert('XSS Attack!');` | `alert('XSS Attack!');` | +| `alert('XSS Attack!');` | `alert('XSS Attack!');` | | `` | `<script>alert('XSS Attack!');</script>` | | `alert('XSSあAttack!');` | `alert('XSSあAttack!');` | | `user@contoso.com` | `user@contoso.com` | -| `"Anti-Cross Site Scripting Namespace"` | `"Anti-Cross Site Scripting Namespace"` | +| `"Anti-Cross Site Scripting Namespace"` | `"Anti-Cross Site Scripting Namespace"` | To customize the safe list, call the method. @@ -367,11 +367,11 @@ | Input | Output | |-------|--------| -|`alert('XSS Attack!');`|`alert('XSS Attack!');`| +|`alert('XSS Attack!');`|`alert('XSS Attack!');`| |``|`<script>alert('XSS Attack!');</script>`| |`alert('XSSあAttack!');`|`alert('XSSあAttack!');`| |`user@contoso.com`|`user@contoso.com`| -|`"Anti-Cross Site Scripting Namespace"`|`"Anti-Cross Site Scripting Namespace"`| +|`"Anti-Cross Site Scripting Namespace"`|`"Anti-Cross Site Scripting Namespace"`| To customize the safe list, call the method.