AntiCSRF Source Code Rss Feed

Source code checked in, #69709

Project Collection Service Accounts — Mon, 01 Oct 2012 22:10:56 GMT

Upgrade: New Version of LabDefaultTemplate.xaml. To upgrade your build definitions, please visit the following link: http://go.microsoft.com/fwlink/?LinkId=254563

Source code checked in, #69708

Project Collection Service Accounts — Mon, 01 Oct 2012 22:06:45 GMT

Checked in by server upgrade

Source code checked in, #52373

_TFSSERVICE — Wed, 28 Jul 2010 17:08:20 GMT

Checked in by server upgrade

Source code checked in, #35092

blowdart — Thu, 02 Jul 2009 11:39:41 GMT

Spelling mistakes in the demo instructions.

Source code checked in, #34959

blowdart — Fri, 26 Jun 2009 08:36:58 GMT

Updated demo web site to contain instructions for use.

Source code checked in, #33281

blowdart — Sat, 18 Apr 2009 06:39:47 GMT

Fixed the DetectionResult configuration setting.

Source code checked in, #31345

blowdart — Thu, 12 Feb 2009 19:04:27 GMT

Removed unnecessary variable

Patch Declined: #2408

blowdart — Thu, 12 Feb 2009 18:34:33 GMT

blowdart has declined patch #2408.

Comment:
Wouldn't work with in-line code pages; alternative approached implemented. But thank you for pointing out the problem!

Source code checked in, #31337

blowdart — Thu, 12 Feb 2009 17:01:30 GMT

Added caching

Patch Uploaded: #2408

andreakn — Wed, 28 Jan 2009 09:00:03 GMT

andreakn has uploaded a patch.

Description:
Performance fix:
As the module is fired for *every* request it's important that it is fast. Doing reflection to find whether attributes has been set on types is expensive.

This fix caches the result of the expensive type-attribute check on the HttpApplicationState so it will be performed only once per handling type (tested this locally, works fine)
utilizes a Dictionary<Type,bool> and uses the key "IDUNNO_ANTI_CSRF_MODULE_TYPE_ATTRIBUTE_OPTOUT_CACHE" to place the Dictionary on HttpApplicationState

Source code checked in, #28559

blowdart — Mon, 15 Dec 2008 22:32:26 GMT

Oops, AntiCSS => AntiCSRF (Thanks Oli)

Source code checked in, #28499

blowdart — Mon, 15 Dec 2008 09:13:44 GMT

Branch to 0.9.1 Beta

Source code checked in, #28498

blowdart — Mon, 15 Dec 2008 09:01:35 GMT

Added interface based exclusion for no codebehind scenarios. Updated version number. Fixed a couple of stylecop niggles.

Source code checked in, #28405

blowdart — Sun, 14 Dec 2008 02:07:44 GMT

Branched for 0.9.0 Beta

Source code checked in, #27987

blowdart — Wed, 10 Dec 2008 21:43:47 GMT

Version number update

Source code checked in, #27985

blowdart — Wed, 10 Dec 2008 21:35:56 GMT

Updated code comments, fixed stylecop errors.

Source code checked in, #27984

blowdart — Wed, 10 Dec 2008 21:25:13 GMT

Add a check to see if an existing cookie is really a GUID, removing the potential for XSS.

Source code checked in, #26116

blowdart — Fri, 05 Dec 2008 07:48:12 GMT

Added more details and links to the readme

Source code checked in, #25187

blowdart — Wed, 03 Dec 2008 12:08:42 GMT

Added configuration settings for Exception versus error page redirection. Added readme for configuration settings. Added a new exception thrown when error redirect is used but no page specified. Move exception messages to resources.

Source code checked in, #24880

blowdart — Wed, 03 Dec 2008 01:02:00 GMT

Added a specific exception for the bad postback scenario. Added serializable to the exceptions.