How to enhance asp.net 1.1 /2.0 security - anti-cross-site attack

ASP.NET 1.1: Open C:\\WINDOWS\\Microsoft.NET\\Framework\\v1.1.4322\\CONFIG\\machine.config Settings: < location allowOverride= "false">< identity impersonate="true" userName="" password=""/>ASP.NET 2.0 above: C:\\WINDOWS\\Microsoft.NET\\Framework\\v2.0.50727 \\CONFIG\\web.config Settings: < identity impersonate="true"/> If you don't have these two items, increase them separately: < location allowOverride="true"> Change to: < location allowOverride=" ;false"> < system.web> < securityPolicy> < trustLevel name="Full" policyFile="internal"/> < trustLevel name="High" policyFile="web_hightrust.config" /> < trustLevel name="Medium" policyFile="web_mediumtrust.config"/> < trustLevel n Ame="Low" policyFile="web_lowtrust.config"/> < trustLevel name="Minimal" policyFile="web_minimaltrust.config"/> < /securityPolicy> < trust level="Full" ; originUrl=""/> < identity impersonate="true"/> < !-- add --> < /system.web> < /location>zh-CN"],null,[0.71736258],zh-CN"]]]