search

Cross Site Request Forgery (aka CSRF or XSRF) is one of the most common attacks in which the user is tricked into executing an unwanted action through his browser on his behalf, in one of the sites he is currently authenticated. ASP.Net Core contains an Antiforgery package that can be used to secure your application against this particular risk. For those who have used earlier versions of ASP.Net will see that things have changed a bit in the new framework.

Bharat Dwarkani shared on Mar 05, 2020
image
dotnetcurry.com
bookmarks
share
visibility54
visibility54 share bookmarks

An issue related to antiforgery that I couldn’t understand at the time. I went with a workaround but thought I’d dig a bit deeper when I have time. Let’s have a look at it together!

Bharat Dwarkani shared on Mar 05, 2020
image
mderriey.com
bookmarks
share
visibility19
visibility19 share bookmarks

If you decide to go with cookies and if your web api is consumed through a web application (e.g. Angular) it will be vulnerable to cross-site request forgery attacks (frequently referred to as CSRF or XSRF).

Bharat Dwarkani shared on Mar 05, 2020
image
blinkingcaret.com
bookmarks
share
visibility126
visibility126 share bookmarks

Learn how to add authentication and authorization to gRPC for microservices in .NET Core.

Bharat Dwarkani shared on Feb 27, 2020
image
auth0.com
bookmarks
share
visibility31
visibility31 share bookmarks

This post is part of the series 'Vulnerabilities'. Be sure to check out the rest of the blog posts of the series! Impersonation and security SQL injections How to prevent CSRF attacks ASP MVC and XSRF Cross-site scripting (XSS) ASP MVC: Mass Assignment Regex - Deny of Service (ReDoS) (this post) Deserialization can be dangerous Prevent Zip bombs in .NET

Bharat Dwarkani shared on Jan 22, 2020
image
meziantou.net
bookmarks
share
visibility19
visibility19 share bookmarks

ASP.NET Core enables developers to easily configure and manage security for their apps. ASP.NET Core contains features for managing authentication, authorization, data protection, HTTPS enforcement, app secrets, anti-request forgery protection, and CORS management. These security features allow you to build robust yet secure ASP.NET Core apps.

Bharat Dwarkani shared on Jan 19, 2020
image
docs.microsoft.com
bookmarks
share
visibility20
visibility20 share bookmarks

Cross-Site Scripting (XSS) is a security vulnerability which enables an attacker to place client side scripts (usually JavaScript) into web pages. When other users load affected pages the attacker's scripts will run, enabling the attacker to steal cookies and session tokens, change the contents of the web page through DOM manipulation or redirect the browser to another page. XSS vulnerabilities generally occur when an application takes user input and outputs it to a page without validating, enco

Bharat Dwarkani shared on Jan 19, 2020
image
docs.microsoft.com
bookmarks
share
visibility448
visibility448 share bookmarks

Web applications have proven to be vulnerable to attacks from different sources, though, and it is our responsibility to safeguard our data. This article will help you develop a secure ASP.NET Core MVC web application.

Bharat Dwarkani shared on Dec 17, 2019
image
syncfusion.com
bookmarks
share
visibility83
visibility83 share bookmarks

In this article, we are going to learn about the ASP.NET Core built-in data protection mechanism, IDataProtector, which we can use to encrypt and decrypt our sensitive data.

Bharat Dwarkani shared on Nov 25, 2019
image
code-maze.com
bookmarks
share
visibility425
visibility425 share bookmarks

An Open Redirection is when a web application or server uses a user-submitted link to redirect the user to a given website or page.

Bharat Dwarkani shared on Nov 24, 2019
image
sagarjaybhay.com
bookmarks
share
visibility5
visibility5 share bookmarks
add