How to use Microsoft AntiXss 4.x?

Question

I want to use the new version of the AntiXss library from Microsoft. I downloaded it from the Nuget package but I'm not sure where should I go from here. No documentation is provided for the library and all the articles I find on the Web are old. Since a lot has changed and pretty much everything I want to use is marked as deprecated in the library itself, I wonder which is the best way to use this library?

• Should I make it my default encoder?
• Should I modify all the views to use Microsoft.Security.Application.AntiXss.HtmlEncode() and such?
• Both maybe?

Any help would be appreciated.

Answer 1

Take a look at this answer to "Why use Microsoft AntiXSS library?" for a hint to get you started.

Answer 2

using System.Web.Security.AntiXss;

string a = AntiXssEncoder.XmlAttributeEncode(text);

Answer 3

Regarding Microsoft.Security.Application.AntiXss being deprecated, Microsoft advises to use Microsoft.Security.Application.Encoder instead. It's a static class inside the same library as the AntiXss class.