0.9.1 Beta

 Downloads & Files



Application AntiCSRF.msi
application, 437K, uploaded Dec 15 2008  - 176 downloads

Release Notes

Public Beta

New Features

  • Marker interface to allow opt-out of pages which dot no use code behind

Features

  • An ASP.NET module to automatically protect against Cross Site Request Forgery
  • Configuration options for the CSRF cookie and form field names
  • Opt-out class attribute to allow a page to opt-out of CSRF protection
 Reviews for this release
 
 
 
 
 

The idea is great, but this HttpModule reflects on the handling type *every* single request to find out if the request is to be CSRF protected using GetCustomAttributes, and does not cache the result of the check.. Seems wasteful
by andreakn on Jan 28 at 7:23 AM 
Updating...
© 2006-2009 Microsoft | About CodePlex | Privacy Statement | Terms of Use | Code of Conduct | Version 2009.6.1.15196