Preventing Cross-Site Request Forgery (XSRF/CSRF) Attacks in ASP.NET Core

MSDN blog to explain on Preventing Cross-Site Request Forgery Attacks in dot net core.

https://docs.microsoft.com/en-us/aspnet/core/security/anti-request-forgery

Comments

Post a Comment

Popular posts from this blog

Error : ID4243: Could not create a SecurityToken.

For persons who worked on WIF Programming would encounter the following error, ID4243: Could not create a SecurityToken. A token was not found in the token cache and no cookie was found in the context We will be getting this error when the browser sends the cookie to the server and when sever validates the token and it fails then we may get this error. The end user can't do anything since the browser sends the token to the server always until the user manually clears the cookie from the browser. To handle this scenario we can srite the below list of code in the Global.asax.cs Basically, what it does is it will check for the excetion type and then it tries to sign out the user (delete the cookie informations) and redirect to the requested page. It is as simple as it is :) protected void Application_OnError() { var ex = Context.Error; if (!(ex is SecurityTokenException)) return; Context.ClearError(); if (FederatedAuthenticati...
Read more

MVC - Looping through the model properties from cshtml

When ever we are struck with the values being not properly filled in the model and need to print all the properties of the model or dto of the page then we can use the below lines of code to loop through the model or dto and write all the items in the page. foreach (var result in Model)             {                                   var type = result.GetType();                     var properties = type.GetProperties();                     <ul>                         @foreach (var property in properties)                         {                         <li>     ...
Read more