From bc75eb9d34e41fbb3a0037135c4f038c01415969 Mon Sep 17 00:00:00 2001
From: Yorick Rommers <yorick-rommers@hotmail.com>
Date: Sat, 31 Oct 2015 20:56:29 +0100
Subject: [PATCH] Using URL Encoding now with the AntiXSS Library

---
 MusicPlayer/MusicPlayer/MusicPlayer.csproj | 8 ++++++++
 MusicPlayer/MusicPlayer/NetworkHandler.cs  | 5 ++++-
 MusicPlayer/MusicPlayer/packages.config    | 1 +
 3 files changed, 13 insertions(+), 1 deletion(-)

diff --git a/MusicPlayer/MusicPlayer/MusicPlayer.csproj b/MusicPlayer/MusicPlayer/MusicPlayer.csproj
index a33a090..46eace5 100755
--- a/MusicPlayer/MusicPlayer/MusicPlayer.csproj
+++ b/MusicPlayer/MusicPlayer/MusicPlayer.csproj
@@ -33,6 +33,14 @@
     <WarningLevel>4</WarningLevel>
   </PropertyGroup>
   <ItemGroup>
+    <Reference Include="AntiXssLibrary, Version=4.3.0.0, Culture=neutral, PublicKeyToken=d127efab8a9c114f, processorArchitecture=MSIL">
+      <HintPath>..\packages\AntiXSS.4.3.0\lib\net40\AntiXssLibrary.dll</HintPath>
+      <Private>True</Private>
+    </Reference>
+    <Reference Include="HtmlSanitizationLibrary, Version=4.3.0.0, Culture=neutral, PublicKeyToken=d127efab8a9c114f, processorArchitecture=MSIL">
+      <HintPath>..\packages\AntiXSS.4.3.0\lib\net40\HtmlSanitizationLibrary.dll</HintPath>
+      <Private>True</Private>
+    </Reference>
     <Reference Include="Newtonsoft.Json, Version=7.0.0.0, Culture=neutral, PublicKeyToken=30ad4fe6b2a6aeed, processorArchitecture=MSIL">
       <HintPath>..\packages\Newtonsoft.Json.7.0.1\lib\net45\Newtonsoft.Json.dll</HintPath>
       <Private>True</Private>
diff --git a/MusicPlayer/MusicPlayer/NetworkHandler.cs b/MusicPlayer/MusicPlayer/NetworkHandler.cs
index 30e6259..f67ad32 100644
--- a/MusicPlayer/MusicPlayer/NetworkHandler.cs
+++ b/MusicPlayer/MusicPlayer/NetworkHandler.cs
@@ -5,6 +5,7 @@ using System.Threading;
 using System.Web;
 using System.Net;
 using System.IO;
+using Microsoft.Security.Application;
 using Newtonsoft.Json.Linq;
 
 
@@ -22,7 +23,9 @@ namespace MusicPlayer
 
         public JObject SendString(string m)
         {
-            HttpWebRequest server =   (HttpWebRequest)WebRequest.Create(ip+":"+port+"/"+m);
+            string encodedstring = Microsoft.Security.Application.Encoder.HtmlEncode(m);
+            Console.WriteLine(encodedstring);
+            HttpWebRequest server =   (HttpWebRequest)WebRequest.Create(ip+":"+port+"/"+encodedstring);
             server.KeepAlive = false;
             HttpWebResponse respond = (HttpWebResponse)server.GetResponse();
             Stream streamResponse = respond.GetResponseStream();
diff --git a/MusicPlayer/MusicPlayer/packages.config b/MusicPlayer/MusicPlayer/packages.config
index 79cd541..577bcb8 100755
--- a/MusicPlayer/MusicPlayer/packages.config
+++ b/MusicPlayer/MusicPlayer/packages.config
@@ -1,5 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <packages>
+  <package id="AntiXSS" version="4.3.0" targetFramework="net452" />
   <package id="NAudio" version="1.7.3" targetFramework="net452" />
   <package id="Newtonsoft.Json" version="7.0.1" targetFramework="net452" />
 </packages>
\ No newline at end of file