All geek questions in one place

Is there a good way to provide an ASP.Net web service call created using Javascript in an HTML button click event handler?

The purpose of using a Javascript proxy for a web service using a service link using Script Manager is to avoid loading the page. If the extracted information is potentially sensitive, is there a way to protect this web service call other than using SSL?

+3
source share
4 answers

If you are worried that other users are accessing your web service directly, you can check the IP address and host header to make sure it matches the expected IP addresses.

, , SSL - .

+1

ssl, , .

+1

:

  • SSL

SSL

, . , ( IP-, ..).

Confirming that the inputs are in the expected ranges verifies that the request was not processed by the party you are talking to.

+1
source

Although SSL would be best, there are a number of client-side cryptography libraries that could alleviate some security concerns - see https://github.com/jbt/js-crypto for a nice collection

0
source

Source: https://habr.com/ru/post/1697385/

More articles:


All Articles