https://wiki.owasp.org/index.php?action=history&feed=atom&title=ESAPI.NET_Build_TroubleshootingESAPI.NET Build Troubleshooting - Revision history2026-05-15T00:50:27ZRevision history for this page on the wikiMediaWiki 1.27.2https://wiki.owasp.org/index.php?title=ESAPI.NET_Build_Troubleshooting&diff=74849&oldid=prevDc: // ms anti-xss woes2009-12-07T01:39:19Z<p>// ms anti-xss woes</p>
<table class="diff diff-contentalign-left" data-mw="interface">
<col class='diff-marker' />
<col class='diff-content' />
<col class='diff-marker' />
<col class='diff-content' />
<tr style='vertical-align: top;' lang='en'>
<td colspan='2' style="background-color: white; color:black; text-align: center;">← Older revision</td>
<td colspan='2' style="background-color: white; color:black; text-align: center;">Revision as of 01:39, 7 December 2009</td>
</tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l1" >Line 1:</td>
<td colspan="2" class="diff-lineno">Line 1:</td></tr>
<tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">== Targeting .NET Framework <v3.5 ==</ins></div></td></tr>
<tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">This doesn't appear to work at this time.  The MS Anti-XSS library v3.1 (latest ver) seems to require v3.5 of the .NET framework in order to build properly. As the .NET ESAPI depends on this, it doesn't appear to be possible to use the .NET ESAPI with previous versions of the .NET framework.  I tried installing and referencing v1.5 (instead of v3.1) of the ms-antiXSS lib but still get this error when trying to build ESAPI targeting .NET v2 or v3.0.</ins></div></td></tr>
<tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;"></ins></div></td></tr>
<tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">''"Error    2    The type or namespace name HashSet could not be found</ins></div></td></tr>
<tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">(are you missing a using directive or an assembly reference?)  </ins></div></td></tr>
<tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">Esapi\Runtime\ContextRuleHandler.cs  </ins></div></td></tr>
<tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">15    17    Esapi"''</ins></div></td></tr>
<tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;"></ins></div></td></tr>
<tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;"></ins></div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>== Finding the MS AntiXSS Library ==</div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>== Finding the MS AntiXSS Library ==</div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>The Esapi.csproj file from SVN has a hint path for the AntiXSS module which probably will not work in your environment.  Thus on my system after loading the project, and expanding the references tab in Solution Explorer, there was an exclamation mark next to AntiXSSLibrary and attempts to build the Esapi bailed out.</div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>The Esapi.csproj file from SVN has a hint path for the AntiXSS module which probably will not work in your environment.  Thus on my system after loading the project, and expanding the references tab in Solution Explorer, there was an exclamation mark next to AntiXSSLibrary and attempts to build the Esapi bailed out.</div></td></tr>
</table>Dchttps://wiki.owasp.org/index.php?title=ESAPI.NET_Build_Troubleshooting&diff=74275&oldid=prevDc: // created troubleshooting page for building the dotnet esapi2009-11-28T03:35:04Z<p>// created troubleshooting page for building the dotnet esapi</p>
<p><b>New page</b></p><div>== Finding the MS AntiXSS Library ==<br />
The Esapi.csproj file from SVN has a hint path for the AntiXSS module which probably will not work in your environment. Thus on my system after loading the project, and expanding the references tab in Solution Explorer, there was an exclamation mark next to AntiXSSLibrary and attempts to build the Esapi bailed out.<br />
<br />
To resolve this, click on the AntiXSSLibrary reference, and then go down and click on the Path option and set it to the location on your filesystem where the <br />
<br />
On my system this is: "D:\Program Files\Microsoft Information Security\Microsoft Anti-Cross Site Scripting Library v3.1\Library\AntiXSSLibrary.dll"<br />
<br />
<br />
== Fixing the FXCop Path ==<br />
I also noticed that after successful builds, I'd get errors about VS being unable to find the FxCopCmd.exe binary.<br />
<br />
Find FxCopCmd.exe on your system, and then click on the Properties pages for the Esapi, EsapiTest and Swingset projects, and click on Build Events. Modify the post build event command line to refer to the proper location of your installed FxCopCmd.exe, or just delete it or rem it out if you don't want to run FxCop after each successful build.<br />
<br />
<br />
<br />
[http://www.owasp.org/index.php/Category:OWASP_Enterprise_Security_API#tab=.NET Back to the ESAPI .NET Page]</div>Dc