We have a custom class that inherits from AntiXss and anytime a method is called, we have noticed that it is attempting to make a request out to 131.107.115.28 over port 80.  We operate in a highly controlled environment, and most of our servers (web included) only have specific outbound access.

 Has anyone else noticed this issue?  Is there a way to circumvent the outbound call?  What exactly is it attempting to do?

 Thanks in advance,

Sam

 Hi

It won't make any request  to any site at all, it's only dll which exist under Microsoft.Security.Application name space(1.5 version)

 its located at:

C:\Program Files\Microsoft Corporation\Anti-Cross Site Scripting Library V1.5\Library\.Net 2.0\AntiXssLibrary.dll

Then its

using Microsoft.Security.Application;

string pageTitle = AntiXss.HtmlEncode(Request.QueryString["Page"]);

Remember: Always HtmlEncode untrusted text.

Download it from

http://www.microsoft.com/downloads/details.aspx?FamilyID=efb9c819-53ff-4f82-bfaf-e11625130c25&DisplayLang=en