title: Fortify Fix High : Cross-Site Scripting Reflected
body: <pre><code>this.lbHint.Text += dt.Rows[i]["HINT_NAME"].ToString() + "&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;";
  </code></pre>
  
  <p>Fortify scan this line as XSS reflected. I try to use <code>Server.HtmlEncode()</code> to <code>this.lbHint.Text += Server.HtmlEncode(dt.Rows[i]["HINT_NAME"].ToString()) + "&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;";</code>, but it seems doesn't work. Fortify still scan it.</p>
  
  <hr>
  
  <pre><code>this.labQueryHeader.Text += "&lt;br /&gt;";
  </code></pre>
  
  <p>And there is the same question(XSS reflected). How do I fix it and pass Fortify scan?</p>
  
  <p>Thanks for your help: ) </p>