ChuckLu - 博客园

2021年9月7日

摘要： HttpOnly Overview The goal of this section is to introduce, discuss, and provide language specific mitigation techniques for HttpOnly. Who developed H 阅读全文

posted @ 2021-09-07 10:13 ChuckLu 阅读(241) 评论(0) 推荐(0)

Secure Cookie Attribute

摘要： Secure Cookie Attribute Overview The secure attribute is an option that can be set by the application server when sending a new cookie to the user wit 阅读全文

posted @ 2021-09-07 10:10 ChuckLu 阅读(302) 评论(0) 推荐(0)

2021年9月6日

CSV Injection

摘要： CSV Injection Author: Timo Goosen, Albinowax Contributor(s): kingthorin CSV Injection, also known as Formula Injection, occurs when websites embed unt 阅读全文

posted @ 2021-09-06 10:51 ChuckLu 阅读(117) 评论(0) 推荐(0)

2021年9月4日

Trouble Connecting to sql server Login failed. "The login is from an untrusted domain and cannot be used with Windows authentication"

摘要：配置单个数据库的权限的话 Security里面找到login，右键看属性找到UserMapping，找到对应的数据库，权限那边勾选db_user, db_reader和db_datawriter权限 Trouble Connecting to sql server Login failed. "T 阅读全文

posted @ 2021-09-04 14:48 ChuckLu 阅读(639) 评论(0) 推荐(0)

2021年9月3日

Datatables Renderers

摘要： Renderers There are occasions when working with tables that the data source for rows in the table do not contain the value that you wish to show direc 阅读全文

posted @ 2021-09-03 15:39 ChuckLu 阅读(127) 评论(0) 推荐(0)

DataTables Security Xss and Csrf

摘要： Security Security is a fundamental topic in web-development and is a topic that should not be overlooked by any developer, from interns to CTOs. High 阅读全文

posted @ 2021-09-03 15:37 ChuckLu 阅读(149) 评论(0) 推荐(0)

Does ASP.NET MVC razor view engine encode HTML by default?

摘要： Does ASP.NET MVC razor view engine encode HTML by default? Does ASP.NET MVC razor view engine encode HTML by default? Or do we have to use the htmlhel 阅读全文

posted @ 2021-09-03 14:21 ChuckLu 阅读(139) 评论(0) 推荐(0)

What is the difference between html.AttributeEncode vs html.Encode?

摘要： What is the difference between html.AttributeEncode vs html.Encode? AttributeEncode converts only a handful of characters: " & < \ Encode does a full 阅读全文

posted @ 2021-09-03 13:41 ChuckLu 阅读(91) 评论(0) 推荐(0)

How does Html.Raw MVC helper work?

摘要： What does HTML.Raw do? Is HTML.raw() specific to MVC? On what scenarios we have to use it? Can you please explain with an example. 回答1 Text output wil 阅读全文

posted @ 2021-09-03 13:35 ChuckLu 阅读(82) 评论(0) 推荐(0)

Html.Raw and Xss

摘要： Prevent XSS attacks and still use Html.Raw It isn't easy and you probably don't want to do this. May I suggest you use a simpler language than HTML fo 阅读全文

posted @ 2021-09-03 11:24 ChuckLu 阅读(124) 评论(0) 推荐(0)

Chuck Lu

公告