Questions tagged [asp.net-mvc]

a web application framework implementing the Model View Controller (MVC) pattern.

ASP.NET MVC is a web application framework implementing the Model View Controller (MVC) pattern.

Related reading

68 questions
4
votes
1 answer

ASP.NET Machinekey encryption

In Asp.NET you can use the MachineKey.Protect to encrypt data. We are thinking of using this to encrypt some data which will be stored in a hidden fields within a web page, these hidden fields are used when the web page is posted back. I have read…
Jake
  • 181
  • 1
  • 3
3
votes
2 answers

How to stop revealing web directories in ASP.Net MVC

We have built a web application using ASP.Net MVC3 and SQL Server 2008 which has features like credit card payment, etc. We engaged a 3rd party to perform vulnerability assessment and penetration testing. We got a good report with few security…
Gayan Perera
  • 31
  • 1
  • 2
3
votes
1 answer

MVC 5 and Multiple AntiForgeryTokens: What is happening?

I have a simple login form. In it, I put an AntiForegeryToken. @using (Html.BeginForm("Login", "Account")) { @Html.AntiForgeryToken()

Jason
  • 133
  • 1
  • 1
  • 3
3
votes
2 answers

How to stop Forced browsing ? - Saving information from being compromised by url change

I have a ASP.NET MVC 4 application. In some webpages or views, I have information displayed in table. Column values are rendered as links. Problems: 1. When I hover over the link, it's URL is visible at the bottom of browser. 2. When I click on…
Suraj
  • 33
  • 1
  • 3
0
votes
1 answer

Is sharing the Membership Provider with other devs a security risk?

I hope this is a good place for this, but I am looking to be safe while sharing my ASP MVC project. If a page was designed with a membership provider is is possible to share this project with out leaking information about your membership provider?…