cyphersec A blog about Web Application Security and .NET development best practices

ASP.NET Hack: Open a page in a new browser tab using Response.Redirect and JavaScript

StringBuilder javascriptInjector = new StringBuilder();
javascriptInjector.Append("<script language='javascript'>");
javascriptInjector.Append("window.open('");
javascriptInjector.Append("~/Folder/Page.aspx?QueryStringValue=Value");
javascriptInjector.Append("');");
javascriptInjector.Append("</script>");

string vPath = javascriptInjector.ToString().Replace("~", Request.ServerVariables["PATH_INFO"]);
Response.Write(javascriptInjector);

About Alessio Marziali

Alessio Marziali (MCTS) is a Security Consultant with 9 years of experience developing secure applications with Microsoft .NET in a variety of sectors in UK and Italy. Published technical author with two ASP.NET books currently available for purchase and OWASP Code Crawler Project Leader.