In the FAQ of information page , you explain why someone use Anti-Cross Site Scripting Library but I really do not understand why?. We always use HTMLENCODE?

The Microsoft Anti-Cross Site Scripting Library differs from HTMLEncode method in that it uses the principle of inclusions technique, which first defines a set of valid characters so that anything outside that set is automatically encoded.

Thanks

Ok Anti-Cross Site scripting library is used as an additional security measure to beef up the website security. It also involved generating a risk matrix and then working out set of valid parameters.

Read about it here with clear examples. Remember you can still use HTMLEncode...

http://msdn2.microsoft.com/en-us/library/aa973813.aspx