search

Cross Site Request Forgery (aka CSRF or XSRF) is one of the most common attacks in which the user is tricked into executing an unwanted action through his browser on his behalf, in one of the sites he is currently authenticated. ASP.Net Core contains an Antiforgery package that can be used to secure your application against this particular risk. For those who have used earlier versions of ASP.Net will see that things have changed a bit in the new framework.

Bharat Dwarkani shared on Mar 05, 2020
image
dotnetcurry.com
bookmarks
share
favorite_border0 visibility21
favorite_border0 visibility21 share bookmarks

If you decide to go with cookies and if your web api is consumed through a web application (e.g. Angular) it will be vulnerable to cross-site request forgery attacks (frequently referred to as CSRF or XSRF).

Bharat Dwarkani shared on Mar 05, 2020
image
blinkingcaret.com
bookmarks
share
favorite_border0 visibility12
favorite_border0 visibility12 share bookmarks

ASP.NET Core enables developers to easily configure and manage security for their apps. ASP.NET Core contains features for managing authentication, authorization, data protection, HTTPS enforcement, app secrets, anti-request forgery protection, and CORS management. These security features allow you to build robust yet secure ASP.NET Core apps.

Bharat Dwarkani shared on Jan 19, 2020
image
docs.microsoft.com
bookmarks
share
favorite_border0 visibility18
favorite_border0 visibility18 share bookmarks
add