title: CAT.NET: vulnerability or false positive?
body: <p>2nd in an occasional series: 
  <a href="https://stackoverflow.com/questions/4371387/is-this-a-genuine-vulnerability-as-reported-by-cat-net-or-a-false-positive">Here's the first one</a></p>
  
  <p>Is CAT.NET correct that the following is a genuine vulnerability in ASP.NET or is it a false positive?</p>
  
  <pre><code>var myInt = Int32.Parse(txtUserInput.Text);
  
  Response.Redirect(string.Format("myPage.aspx?myId={0}", myInt);
  </code></pre>
  
  <p>CAT.NET is reporting this as a redirect vulnerability needing remediation via encoding myInt.</p>