I have on my todo list to update AntiXSS for Java to be compatible with the changes Microsoft introduced with AntiXSS 3.0. I’m not planning on adding any automatic integration support at this point as we don’t just have the one development framework on the Java side… Expect the next version of AntiXSS by the end of July, looking at current schedules.

As for the SQL Injection functionality – are you thinking of CAT.NET? This is a static source code analysis tool that was released at the same time as AntiXSS 3.0. If you’re looking for something like that for Java, the only free security related options are something like YASCA, or OWASP Orizon.

Nice artile.

.NET anti xss have another method related to sql injection..

We can have it in java also.

Thanks
Saravanan