How to prevent Cross Site History Manipulation

See more:

C#

ASP.NET

Javascript

Hi, All.

We are currently using Checkmarx to scan our code. One of the findings is Cross Site History Manipulation.

According to my research the cause of this finding is the Response.Redirect. I tried to used javascript in redirecting my page instead and it worked. But the problem now is that whenever i call window.location.href="/KB/answers/mypage.aspx" it still continues the postback before redirecting. So it shows the login page(first page) for a second or two before redirecting to my home page.

I need some help on how to fix that. Or if you have any other way to redirect a page without using response.redirect will do. Thank you very much.