Security for Microsoft® Visual Basic® .NET

Summary

In this chapter, you’ve learned about the many forms of input to your Visual Basic .NET application that you need to be aware of. Input includes direct user input from a text box, data read in from a file, HTTP header information posted by a Web browser, and indirect input to subroutines. Although Visual Basic .NET provides a number of front-line defense tools such as the Validating event and Web Validator controls, it’s the last line of defense that you need to be most concerned about to make your application more secure. You should use Visual Basic .NET language tools such as Regex and Parse to validate that data is of the appropriate length and type and has the expected content before taking critical action based on the data value. ...