Secure ASP.NET MVC Applications

published 3 days, 12 hours ago, submitted by ethilik 4 days, 4 hours ago

weblogs.asp.net — One of the greatest advantages of ASP.NET MVC is that it provides a "Close to the Metal" programming experience and you have full control over the HTML. It aslo means that you should care about the vulnerabilities regards with your HTML. In webform, server controls would be automatically HTML-encoded their outputs. While developing ASP.NET MVC apllications, you should filter your HTML to avoid XSS attacks. Use the following HTML helper methods to avoid vulnerabilities in your ASP.NET MVC applications. read more...

1 comment | category: MVC | Views: 268

What is Microsoft waiting for providing a decent path API?

published 9 days, 10 hours ago, submitted by johnsheehan 9 days, 13 hours ago

codebetter.com — I was recently browsing the code source of Managed Extensibility Framework and realized that this future part of .NET 4, full of tricky and advanced ideas, was naively relying on strings to describe files and directories paths. It seems that the version 4 of .NET will miss the need for a descent path API. There is the class System.IO.Path but it is feature limited, full of flaws and pitfalls (to not say bugs) and it fosters users to encode their paths into raw strings. It seems to me that using strings to encode paths is as primitive as using String.IndexOf("<tag>") to parse some XML. read more...

1 comment | category: CLR | Views: 247

Spark Language Package - Preview 1

whereslou.com — This is a very early copy of a msi which installs a Spark language package for Visual Studio 2008. It will put dlls into a Program Files\Spark directory and add just enough registry keys to add color and intellisense to files with a .spark extension. read more...

add a comment | category: MVC | Views: 257

The Dynamic Programmer - Sharp Architecture approaching version 1.0

blog.dynamicprogrammer.com — Sharp Architecture is a web application architecture that uses the ASP.NET MVC with Castle.Windsor as the IoC, NUnit for Testing, NHibernate as the ORM and propose a et of rules on how to develop an application. This release include project templates for Visual Studio 2008. read more...

add a comment | category: Architecture | Views: 7

Commit to a svn repository while being offline

aidanf.net — This article explains how to use git for offline commits to a subversion repository read more...

add a comment | category: Open Source | Views: 9

Intellisense in Spark ViewEngine is coming

whereslou.com — On the other hand if you look at the feedback from people who wouldn’t consider it a viable alternative there’s a definite theme surrounding Visual Studio integration in general and Intellisense in particular. So I decided a few weeks ago to muster up my courage and take another pass at the task of making a Visual Studio integration package to provide a Spark language service. read more...

add a comment | category: ASP.NET | Views: 169

The Perfect Storm Botnet

published 24 days, 15 hours ago, submitted by siphilp 24 days, 21 hours ago

codebetter.com — Rob Conery talks about the power of a bot net and why developers should be aware of XSS attacks and other nasties should an app be allowing users to post into the system. read more...

add a comment | category: Security | Views: 132

What Constitutes Ethical SEO?

published 24 days, 4 hours ago, submitted by dengar007 26 days, 15 hours ago

frickinsweet.com — As a web developer / someone who has a blog, I understand dealing with spam is one of the necessary evils of having a comments enabled on my site. Too often, SEO companies use unscrupulous tactics in the name of website optimization. What is the best way to prevent link spammers from overrunning your site? read more...

add a comment | category: Security | Views: 136