Membership, Authorization, and Security
What's In This Chapter?
- Requiring login with the Authorize Attribute
- Requiring role membership using the Authorize Attribute
- Using security vectors in a web application
- Coding defensively
Securing your web applications can seem like a chore. It's something you have to do, but not a whole lot of fun. Nobody looks at your application and says, “Wow! Check out how well they secured my personally identifiable information! This programmer rules!” Security is generally something you have to do because you don't want to be caught in an embarrassing security breach.
No, security doesn't sound like a whole lot of fun. Most of the time, when you read a chapter on security it's either underwritten or very overbearing. The good news for you is that we, the authors, read these books, too — a lot of them — and we're quite aware that we're lucky to have you as a reader, and we're not about to abuse that trust. In short, we really want this chapter to be informative because it's very important!
- Server Components HTML-encode displayed values and attributes to help prevent XSS attacks.
- View State is encrypted and validated to ...