Ways Developer Can Secure An ASP.NET Application, Part 1

Don’t turn off request validation unless you need to.  Request Validation in ASP.NET explains what this feature does, how to disable it if you must in Web Forms, MVC, and Web Pages and how to manually validate request in absence of it. To mitigate Cross-Site Scripting (XSS) attack, encode any input that you output via …

Continue reading Ways Developer Can Secure An ASP.NET Application, Part 1

Advertisements

ASP.NET Web Services – Blast From The Past (Part 2)

Here is part 2 of this topic as promised.  It will cover consuming web service using HTTP POST and using jQuery AJAX.  If you missed part 1 of this topic, click here. But before I start, I forgot to mention in part 1 that when you set up your web service as part of a …

Continue reading ASP.NET Web Services – Blast From The Past (Part 2)

ASP.NET Web Services – Blast From The Past (Part 1)

My last post regarding web services was June 13, 2013 and I ended it with an expectation of a sequel.  Fast forward to today, web services have now been regarded by Microsoft as legacy technologies and recommends using WCF services instead.  Then again, with Web API available why use WCF services if you are only …

Continue reading ASP.NET Web Services – Blast From The Past (Part 1)

ASP.NET: GET, POST, IsPostBack, QueryString, and Form

I have been asked a couple of times in my job interviews about GET, POST, IsPostBack, QueryString, and Forms.  These are the basics that one who has worked on ASP.NET should know.  Sometimes you get focused on higher level stuff especially if you are working with wrappers or some sort of framework on top of …

Continue reading ASP.NET: GET, POST, IsPostBack, QueryString, and Form