postback security


i've operative jquery *.asmx web services lately, i'm perplexing security-conscious doing so.



i figure illusory quarrel an ajax ask -- even logged-out -- apparatus should wholly permitted while logged-in.



thus, i consolidate special keys hashes any ajax requests method countenance user's state before behaving certain server-side actions.



however



i always feigned postbacks stable regard. .net pitch an blunder viewed ask tampered with.



is stable assumption? should i countenance requests, presumably they're viewed around ajax non-ajax http post?



i suspect both technically http posts, nonetheless ajax wholly submits definitely pass, since normal asp.net includes viewstate values. correct?



Comments

Post a Comment

Popular posts from this blog

why does floated <input> control floated component slip over too distant right ie7, nonetheless firefox?

Image
hopefully settlement value thousand lines formula since i don't wish have frame down asp.net code, html, javascript, css yield an instance (but i'll supply i on ask someone doesn't contend "oh, i've seen before! try this...") [actually, i post formula css - bottom question]. here apportionment form page being displayed firefox: the blue boxes surrogate stylings <label> add-on orange lines surrogate border styles <div> tags (so i where extend break). <label> 's styled float: left <div 's right. addition, heir controls <div> also float:left definitely line adult tip <div> (since there taller controls multiline textboxes down below). the radio buttons generated an asp control, wrapped <span> - also floated left given heir <div> . here same apportionment shade rendered ie7: there few teenager digest differences, nonetheless large that's pulling me crazy additional white space beside <input> con...
Read more

grails record upload problems

i'm perplexing heed record upload formula grails website, i'm controlling problems. i'm controlling same formula found . here code: <g:form action="upload" method="post" enctype="multipart/form-data"> <input type="file" name="myfile" /> <input type="submit" value="upload" /> </g:form> and def upload = { def f = request.getfile('myfile') if(!f.empty) { flash.message = 'success' } else { flash.message = 'file can't empty' } } i'm receiving following blunder during runtime: message: signature method: org.mortbay.jetty.request.getfile() convenient justification types: (java.lang.string) values: {"myfile"} caused by: groovy.lang.missingmethodexception: signature method: org.mortbay.jetty.request.getfile() convenient justification types: (java.lang.string) values: {"myfile"} ...
Read more

unable interpret unicode character

i have an aspx page creates an xmldocument vigilant sql information following transforms another xml request (rss feed) controlling an xslt record xpathnavigator xslcompiledtransform. catchy information enclose intelligent quotes (\u2019) law an blunder (unable interpret unicode impression \u2019 during index 947 specified formula page). i'm certain encoding settings work, nonetheless there proceed hinder but carrying check forms characters information i'm formulating xml attributes? my xslt record looks this... <?xml version="1.0" encoding="utf-8"?> <xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/xsl/transform"> <xsl:output method="xml" version="1.0" encoding="iso-8859-1"/> i've attempted changing xsl:output encoding utf-8 utf-16 nonetheless still same problem. any ideas? here's formula helps... xmldocument xdoc = new xmldocument(); xmlnode xnode = requests.xm...
Read more