As you have seen, anti-XSRF helpers, as described previously, are quite useful, but they have several limitations. If a user does not accept cookies on their browser, their requests will be rejected by the controller action decorated with ValidateAntiForgeryToken. You also need to make sure that your application is safe from XSS threats; otherwise, the anti-forgery token can be read. You must be mindful as well that the anti-forgery token does not work with HTTP GET requests, but only works with HTTP POST requests.
Limitations
by Michel Bruchet, Jason De Oliveira, Kenneth Yamikani Fukizi
Learn ASP.NET Core 3 - Second Edition
- Title Page
- Copyright and Credits
- Dedication
- About Packt
- Contributors
- Preface
- Section 1: Introduction and Environment Setup
- What Is ASP.NET Core 3?
- Setting Up the Environment
- Continuous Integration Pipeline in Azure DevOps
- Section 2: A Practical Demonstration of ASP.NET Core 3
- Basic Concepts of ASP.NET Core 3 via a Custom Application: Part 1
- Preview of the Tic-Tac-Toe demo application
- Building the Tic-Tac-Toe game
- Introduction to the default ASP.NET Core 3 classes
- Preparing the basic project structure
- Creating the Tic-Tac-Toe home page
- Giving your web pages a more modern look by using NPM and layout pages
- Creating the Tic-Tac-Toe user registration page
- Creating the Tic-Tac-Toe user service
- Creating a basic communication middleware for the Tic-Tac-Toe application
- Adding error handling to the Tic-Tac-Toe application
- Summary
- Basic Concepts of ASP.NET Core 3 via a Custom Application: Part 2
- Client-side development using JavaScript
- Optimizing your web applications and using bundling and minification
- Working with WebSockets for real-time communication scenarios
- Taking advantage of session and user cache management
- Applying globalization and localization for multi-lingual user interfaces
- Configuring your applications and services
- Implementing advanced dependency injection concepts
- Summary
- Introducing Razor Components and SignalR
- Creating ASP.NET Core MVC Applications
- Understanding the Model View Controller pattern
- Creating dedicated layouts for multiple devices
- Understanding ASP.NET Core state management
- Using view pages, partial views, View Components, and Tag Helpers
- Dividing a web application into multiple areas
- Applying advanced concepts such as view engines, unit tests, and integration tests
- Layering ASP.NET Core 3 applications
- Summary
- Creating Web API Applications
- Section 3: The ASP.NET Core 3 Supporting Ecosystem
- Accessing Data Using Entity Framework Core 3
- Securing ASP.NET Core 3 Applications
- Securing ASP.NET Applications - Vulnerabilities
- Hosting ASP.NET Core 3 Applications
- Managing ASP.NET Core 3 Applications
- Other Books You May Enjoy
Limitations
-
No Comment
..................Content has been hidden....................
You can't read the all page of ebook, please click here login for view all page.