What is the difference between the two ...?

From a security point of view, what are the main points that can help with the use of the .master file compared to the .aspx file?

+3
source share
4 answers

From a security point of view, there really is no difference in the .master file and the .aspx file. They have a unique execution path when it comes to the page life cycle, but they execute in the same way and will be subject to the same security and protection flaws.

However, shortening the code that the .master file resolves (and also makes you think about generalization) will help you develop a reliable website (security-related).

+2
source

Technically, there is no significant difference from a safety point of view. You can implement your security logic on the main page, which will ensure that it is included on every page that uses this MasterPage. You can argue that this makes things safer, because the likelihood of human errors is less :).

+1
source

, 1 . , . .

ASP.NET . RequestValidation , SQL-, , , UrlAuthorization, URL- ,...

How Tos Index.

+1

- .

0

Source: https://habr.com/ru/post/1762507/


All Articles