.Net EnableHeaderChecking
Posted by James Jardine on November 9, 2015 · Comments Off on .Net EnableHeaderChecking
Filed under: Security
Filed under: Security
How often do you take untrusted input and insert it into response headers? This could be in a custom header or in the value of a cookie. Untrusted user data is always a concern when it comes to the security side of application development and response headers are no exception. This is ...
Potentially Dangerous Request.Path Value was Detected…
Posted by James Jardine on November 4, 2015 · Comments Off on Potentially Dangerous Request.Path Value was Detected…
Filed under: Development, Security
Filed under: Development, Security
I have discussed request validation many times when we see the potentially dangerous input error message when viewing a web page. Another interesting protection in ASP.Net is the built-in, on by default, Request.Path validation that occurs. Have you ever seen the error below when using or testing your application?...
Follow Us
